General

  • Target

    2024-01-24_30ae5007f3c6c402e2150d3b602070cd_cryptolocker

  • Size

    93KB

  • MD5

    30ae5007f3c6c402e2150d3b602070cd

  • SHA1

    6d13d574b35df77d791d2109c0f43f3c59e0e555

  • SHA256

    ad46f1cdd838c82fe1e62de2928c0e88535ab0b0a73b1ed1fa3a2044cd8787c2

  • SHA512

    69e9cd9014c2d7de9cadb780789b731e307a8c08d55e59871e12460c15bf6d3b7e86ae115d84d750cb47ae03ac6d582295ada3cd498cc8c229d3622576d50fb7

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01H:AnBdOOtEvwDpj6zF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_30ae5007f3c6c402e2150d3b602070cd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections