General

  • Target

    2024-02-04_3be49677a1c60179602ce59a35c3ee1c_cryptolocker

  • Size

    125KB

  • MD5

    3be49677a1c60179602ce59a35c3ee1c

  • SHA1

    0e4e8a3c3da47ef3229800cedc433f715a38a09f

  • SHA256

    25524d6e88def9a383b16458f00708915823037eb83f6c329907ab64df6fc0fe

  • SHA512

    e832aa289a44adf6a235e27c21d54d83840d4f05bbf2f98ff3aab09ee05173e4cc7b3fe6a3558ce956a33f8e0b6fce21cda3ccef803b7ed302096ef0a6262120

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIG:AnBdOOtEvwDpj6zv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_3be49677a1c60179602ce59a35c3ee1c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections