General

  • Target

    2024-01-29_e9cdaa65a6b1790ae42db70ebf7c1ec7_cryptolocker

  • Size

    95KB

  • MD5

    e9cdaa65a6b1790ae42db70ebf7c1ec7

  • SHA1

    c4e8c2aec70c551b8faec4126148d16f4d3b57c8

  • SHA256

    f3957196074b168eff9c5308c5be17c488b54e9a9e3be282c0ccc1ba16c8f4d5

  • SHA512

    26807558dbe8b74654a1d5768213615a4601da99a8b8c921305e081019fa268740fa8fc7083ab1e7bca5ee29372e3a660e9edee32a73340ae1e625cd455740b0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01hn:AnBdOOtEvwDpj6zz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_e9cdaa65a6b1790ae42db70ebf7c1ec7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections