General

  • Target

    2024-01-24_e4648a347e82d39982af8cc0887cfa72_cryptolocker

  • Size

    124KB

  • MD5

    e4648a347e82d39982af8cc0887cfa72

  • SHA1

    5d456ae66f9e6437fdd122130fe9696cb14ef0b4

  • SHA256

    6730a9e35e09351056e9b4cf57bc600adf9d2a0e926dd0f63ac44b98f56d468f

  • SHA512

    87a62e6ed2a9073e11394223732bd836f75fbbc477855b4462fa080d69cab867b4463aa644d74f13df69f70e8a8e92cdef34d61738f1d32d5765813fdc3ad6a7

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eM:AnBdOOtEvwDpj6zS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_e4648a347e82d39982af8cc0887cfa72_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections