General
-
Target
2024-06-08_e195338e0b56fed22209d710855cb612_cryptolocker
-
Size
70KB
-
MD5
e195338e0b56fed22209d710855cb612
-
SHA1
3c736c16d355bd6db31a23e9b6cab483e4d09c6b
-
SHA256
e1d880c9fb388c896e89ebda4b9a36638bc86e6d3821c4d84aa6c3890c652b19
-
SHA512
67b952ff277f87531418145d7756f003d2a4874debe2d016fc1ea39ea377db410864665542bcd5cf58befa8b3383e6fd43ec2399fe9a37f260a053c88831c001
-
SSDEEP
768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pn:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAn
Score
10/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 2 IoCs
-
Detection of Cryptolocker Samples 2 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-08_e195338e0b56fed22209d710855cb612_cryptolocker
Headers
Sections
-
out.upx
Headers
Sections