General

  • Target

    2024-02-14_fa25f00deb918cd7d0410596def72dc0_cryptolocker

  • Size

    80KB

  • MD5

    fa25f00deb918cd7d0410596def72dc0

  • SHA1

    ac656bbc1e5c707a8fc90624aa724d472213d0ed

  • SHA256

    6f9fbe64fce6a4daea4cb92c0ffe46b246ae819ddee60cb3c5234e847aaf27fc

  • SHA512

    f887bb1a6e45fe4f0f2863b9e04478c563d651dc45ef95455e889abe70e4c515f9453c3e9b14147add85b6a5fa5f4f2d0fc135cd43e910094ca9d83be0ca0b2a

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS15E:zCsanOtEvwDpjQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_fa25f00deb918cd7d0410596def72dc0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections