General

  • Target

    2024-03-05_8a7156049f98a6c475c78195dfad50f2_cryptolocker

  • Size

    57KB

  • MD5

    8a7156049f98a6c475c78195dfad50f2

  • SHA1

    47cf5751e49774d5c1109e627fc4dcd39176c261

  • SHA256

    c4c247930cbe9ea5f6431cd1449c61862800b8f0244438bfdaa68c296c400dfa

  • SHA512

    56a9a134c23004efe28097b4317fd5736073907f8f292fa1e07c543ffb2afc57be7f1ed1a78bb936be5ca5dacaf51b52cbeb4bc49e434b7647df157b0eae7350

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5appRR2u:z6QFElP6n+gKmddpMOtEvwDpj9aYa32u

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_8a7156049f98a6c475c78195dfad50f2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections