General

  • Target

    2024-03-08_f2447d6e853f82f6e56fa617f96e0dfa_cryptolocker

  • Size

    63KB

  • MD5

    f2447d6e853f82f6e56fa617f96e0dfa

  • SHA1

    4fb4e86618c37a8555e043730e5b2bf054cf25e3

  • SHA256

    12ef453094a1b764765db8ae41a8be4634541526cefd7df0d80e0905f015b430

  • SHA512

    d1169a430f6086b6e2480733c30b0acf35c809a21adaecb1833b1546765b933b38e93b9066de1a5b1df3ed60aa096b483335c67d7cfe8be0f5f8d364d7a78ba7

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAo7g:1nK6a+qdOOtEvwDpju

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_f2447d6e853f82f6e56fa617f96e0dfa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections