General

  • Target

    2024-01-29_12fdbdab0c9bd2189bc1131dd5598024_cryptolocker

  • Size

    125KB

  • MD5

    12fdbdab0c9bd2189bc1131dd5598024

  • SHA1

    ef692e8921f6452068ebfb6ed74b937318128038

  • SHA256

    1bebc729d8c80f305166003c8725ef4bcd32773a5812baab6b10e0a35357cd80

  • SHA512

    486cabb2a1a7dd3f3fcf6939e619827ba046dac911a89739a69c29c013aa779bf63c14bf9300c886d20c648b06d6a4cd9122faf497c07b5f372028ddfd852b75

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ey:AnBdOOtEvwDpj6zs

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_12fdbdab0c9bd2189bc1131dd5598024_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections