General

  • Target

    2024-02-21_a1f95a97538e1003411e56a0f3d1cac3_cryptolocker

  • Size

    70KB

  • MD5

    a1f95a97538e1003411e56a0f3d1cac3

  • SHA1

    cd22af5904913c0ddd7de9a9fefe09d4b21061d8

  • SHA256

    4dea314a8a03e1f0e07196205de09cb29731661d97e3a3ab4d010967a3d4f77d

  • SHA512

    428879636c3146fe484cb19278e389fa8e27d267abb4e024e38b3a031a1c20130f7baada2f4b14d42b0b247a99a59f365a17e21bbe46a7ad6c0eb164fbddd933

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal3Si:1nK6a+qdOOtEvwDpj8f

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_a1f95a97538e1003411e56a0f3d1cac3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections