General

  • Target

    2024-03-27_a857dc81cbe8f016a8739f22ce657a38_cryptolocker

  • Size

    117KB

  • MD5

    a857dc81cbe8f016a8739f22ce657a38

  • SHA1

    eda3c204b5d237e225b2d8cc4710df9cfee9355a

  • SHA256

    d6681aea7ff31f1d2e1aebdfcf9009e1d3ddf0e39a4e6ace65fe49476a4901d2

  • SHA512

    7a2596db8a6436fb73513d1d09d4ae18f476a91fcec4660ab4ebcdd1d44a1eaf0420188846a7e6363f11df44fa7e3629c2640a571dfb2defe178a31b7ab096c4

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNLX9K:T6a+rdOOtEvwDpjLze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_a857dc81cbe8f016a8739f22ce657a38_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections