General

  • Target

    2024-01-26_6e4400e1ef8ee647e0af3093712756e4_cryptolocker

  • Size

    125KB

  • MD5

    6e4400e1ef8ee647e0af3093712756e4

  • SHA1

    de92c8bf9abb95e3d54ae8b38d108240f2eac71a

  • SHA256

    45e5a9e1ad2ca6dbc8d689569e57afe7f9d17a541e835fdcdbdaa788d48e59ae

  • SHA512

    5e09c9a33f922897c2943123c8c4e9d41dc0e9f86c1be6c5d6db2f043f66ca6dd2674947be43576031518e67cd5a163ce4d3ac675d2bc71dd3eec3fa44bd17e9

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e0:AnBdOOtEvwDpj6zK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_6e4400e1ef8ee647e0af3093712756e4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections