General

  • Target

    2024-01-18_2806e25e7bbc731f3dcfd5e363fa9fb4_cryptolocker

  • Size

    86KB

  • MD5

    2806e25e7bbc731f3dcfd5e363fa9fb4

  • SHA1

    0cbf21ad4edbc0a90a6e7afe4435bef595deda18

  • SHA256

    4754755c9ae2b0d6621791cd30ed9a94006b5db50a4c67a3d8d8f18187334365

  • SHA512

    dfd7eb0a3cef03edcdae94faa2054f074572cd6e9ec0413a79cdfcb3e95c1132c8b74b03a1e8a3980e67420581f65c77d9faa6a47ddef7aeea9d8295b5bba18f

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/t:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_2806e25e7bbc731f3dcfd5e363fa9fb4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections