General

  • Target

    2024-03-08_a0094e6d9f09ccfe9458c0a6f845aab7_cryptolocker

  • Size

    80KB

  • MD5

    a0094e6d9f09ccfe9458c0a6f845aab7

  • SHA1

    f4a2884a555697803d0d6ff35b15ab802acc1240

  • SHA256

    16a4261ba4dc0937261e5af1c47c10de919fab921b851f623736a2bbd899ca2e

  • SHA512

    9234383a9652df66663a72972c6849060a4c91b7e5032b70e90928ae8a35556ebbbfe18355039e631a25fda26fa1935a5a313ba38285431a7cda68bc84c0a86c

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdphp:T6a+rdOOtEvwDpjNtn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_a0094e6d9f09ccfe9458c0a6f845aab7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections