General

  • Target

    2024-04-27_a2e5120c8427948dbd5b23152fac95d5_cryptolocker

  • Size

    110KB

  • MD5

    a2e5120c8427948dbd5b23152fac95d5

  • SHA1

    faf11073710c8ded3adff93d9eb166a5bac2349e

  • SHA256

    f28533316e8371cbaa3f6bdac3bd8936f6667e4b00572840878ee49f44ded4f1

  • SHA512

    415fd0f0fbf1136d2ab3129330329e2751ab2ec2dde8569db59cc6f8f0488ab0e98d0ecdd33f6775e2f37ca61c9180fd963754f1b148ee9a02540484910f449e

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwMghJOvjH:z6a+CdOOtEvwDpjcz2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_a2e5120c8427948dbd5b23152fac95d5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections