General

  • Target

    2024-02-18_ab5f9f92a1ab61878f218a4919d70a00_cryptolocker

  • Size

    71KB

  • MD5

    ab5f9f92a1ab61878f218a4919d70a00

  • SHA1

    21528ea76e44c50668a66a36c599b38d2b6f77e2

  • SHA256

    a5076ad6fcaf1aca3ce5a904274882ab4f580fc43a4d806b6f67c7a1452f321a

  • SHA512

    5db9aaffc474b380d32c23cff32f5b4fdd7bc72a4c8e14d527108e307740501a12ba2e157c582840c4cb1561a98aecfe505fda1cf43c66f51679c723bb7e3bc8

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalPn:1nK6a+qdOOtEvwDpja

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_ab5f9f92a1ab61878f218a4919d70a00_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections