General

  • Target

    2024-03-26_f970977ff920fba0ff8348d29317a5c9_cryptolocker

  • Size

    65KB

  • MD5

    f970977ff920fba0ff8348d29317a5c9

  • SHA1

    0c1602281833a1ac326674cb325ec59f77f56955

  • SHA256

    d5e0337b872090564fdf1b2ad8a2b52df702e09497025ecc36e912f9f06cd8af

  • SHA512

    7a164cd7d9cc04e225c23a64158eb8eb65f6d4b64b5c01a1c5da406c75990ae58414cdf892dc991a99bccf7704bdd6dd1066be69e34adf8afa38cd3dc886b2ca

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UnUT:1nK6a+qdOOtEvwDpjX

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_f970977ff920fba0ff8348d29317a5c9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections