General

  • Target

    2024-03-15_5a480e9b30e9198d13b04703878f8992_cryptolocker

  • Size

    49KB

  • MD5

    5a480e9b30e9198d13b04703878f8992

  • SHA1

    7c3219320b54d1368e6d63fdf6fb451ec6c93d23

  • SHA256

    cf9dcc770f618dbb139385c762dcaa2c404b3ba31d415fbb9fb22f5d5329d76e

  • SHA512

    70321aec7a3234a1e020b47bbd8ae9c1646adfdca29d1c71d5fe561362e3d4a2561f7b394f0bfef9f62229a988b7285e18b20fe548dd0191d5d346f31e40f2e8

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+Oc:z6QFElP6n+gKmddpMOtEvwDpj31c

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_5a480e9b30e9198d13b04703878f8992_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections