General

  • Target

    2024-01-29_e620829b6891d2d085d6e293a46d6b96_cryptolocker

  • Size

    125KB

  • MD5

    e620829b6891d2d085d6e293a46d6b96

  • SHA1

    e9c0b7707ae162cca5f7a513db354f9dbd776c88

  • SHA256

    ef2b09317e21cd55b5d1dc5aaff615eb551fdf01832683b3572b7919246c4621

  • SHA512

    546516d39039c257cae293dfece94a5797f9f829eec0c55d80faf73d2c2ae5fc32d1257d11a930f72d103a6bea42a6ab4626c5580accefd18067fe3b88e841bb

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e0X:AnBdOOtEvwDpj6zs

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_e620829b6891d2d085d6e293a46d6b96_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections