General

  • Target

    2024-01-27_d06ee8898df572a899cb9ab4ebe55cc5_cryptolocker

  • Size

    85KB

  • MD5

    d06ee8898df572a899cb9ab4ebe55cc5

  • SHA1

    afb351b2042eadf00df439f8cd70e54ef7949049

  • SHA256

    38174e4e49a68d7d7c44909bd2b9608334ca20228ccff741bd8c5fd6cdeb29b9

  • SHA512

    48e7b95c992be20a1f40c6f6835210eab92d459ac3a55fafaf4c63f47a83f5c131fd17607edc21403dcc179335f12b8cbf2b65f85df9642a35946e74cbb513a5

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISN:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_d06ee8898df572a899cb9ab4ebe55cc5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections