General

  • Target

    2024-03-08_a2860197be590a2109bd305aee48b5f9_cryptolocker

  • Size

    82KB

  • MD5

    a2860197be590a2109bd305aee48b5f9

  • SHA1

    790548a2d5d3eb6f509e10d9350cc046360ed662

  • SHA256

    92d92f461a85c90e499d1ccb73c6cde71b7aa7e4a816ddd127103e25d4d293bf

  • SHA512

    be74bcd18df64c692847ffad1cc416e49717ce2616eb1e17db68507c2cbf769e60984bbf8f601bfeb1d4fe35f9dd58bc27fc00c90383d3d0e6795b0b39b03a1b

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1ky2l:zCsanOtEvwDpjf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_a2860197be590a2109bd305aee48b5f9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections