General

  • Target

    2024-05-26_8b71f0eaa12bbc81bd8c319c66d64fc8_cryptolocker

  • Size

    76KB

  • MD5

    8b71f0eaa12bbc81bd8c319c66d64fc8

  • SHA1

    c147dc88aa5722b0b26834d0ea569b5c23bf5359

  • SHA256

    3e51e0dc2695bcf6032bf61ea42a469f651f1df0391a84299baaf566d213d67b

  • SHA512

    c7dbd6356db098ce134dfa097821b2e1b13041fc3c26e93de4676e5b363462de2e31c36dc3c8ead196558e5c69d7b03d52372ce477f0408daf2756cd049f94de

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalVr/:1nK6a+qdOOtEvwDpjI

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_8b71f0eaa12bbc81bd8c319c66d64fc8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections