General

  • Target

    2024-01-29_4a207a2e5348a4e9532471f85a9af85d_cryptolocker

  • Size

    100KB

  • MD5

    4a207a2e5348a4e9532471f85a9af85d

  • SHA1

    bee9d1e7019bb7c467c35bffb38d8bb1337d4d9a

  • SHA256

    4a9b30f77fa79a5a60fbab2d6e9ad3891a3c9a096e64bc581f47253ced57ac9c

  • SHA512

    91038a4d689efff93c50c1f8bd5efd1cfa7eead5803e93ce2cb9e48539439ce8f8d998ed51adc1afb9815b4dbd527a5848193524f420d431ee3fc11878b78ab3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6S:AnBdOOtEvwDpj6zm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_4a207a2e5348a4e9532471f85a9af85d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections