General

  • Target

    2024-01-18_1e4b5a7de8ffe259a8d993539beb2dfe_cryptolocker

  • Size

    87KB

  • MD5

    1e4b5a7de8ffe259a8d993539beb2dfe

  • SHA1

    c6352f1fc0c1921642e02068015d5a8ad045425e

  • SHA256

    d0e6932f51cc4e4ffd1a4f90164b9b8a806cc59c1f2932823db041d31834d1a0

  • SHA512

    7788f533762934adc88f662e7222e0bbd6282ac65f0cfc5dfa300b2c0bb428f6fb3e4d05e956b5a5919cdfe91836f58d6903ff9d26dddb2104d552c3d25a7af3

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJY/P:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_1e4b5a7de8ffe259a8d993539beb2dfe_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections