General

  • Target

    2024-06-01_a87bad482984b54c0320f4b1be55a7f8_cryptolocker

  • Size

    79KB

  • MD5

    a87bad482984b54c0320f4b1be55a7f8

  • SHA1

    b3df25edb3a6f6c9ec8322c90b33f5fbbdbe6c2f

  • SHA256

    4a0cd8907899fb48aa4f68e25bae13fcdf97672331f2849d2bccaf44c0cdd8d0

  • SHA512

    29f9ae5d066ec0704ffc2a380b781a21e4dabd52dcc0434170611fa9e4d32e643ce938d9bfd7b1ad3f2161674e18b651c4d0f9fb8f85acbb90692e6a24b2db1a

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB18:T6a+rdOOtEvwDpjNtHP3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_a87bad482984b54c0320f4b1be55a7f8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections