General

  • Target

    2024-02-04_039701823b7e24e4a854fd1ce7ffe02f_cryptolocker

  • Size

    125KB

  • MD5

    039701823b7e24e4a854fd1ce7ffe02f

  • SHA1

    b79d4463861450344db78955f136644d6d1c6cef

  • SHA256

    7195596b89273ed8f3af60ac88181600fbba8e5c74ddf50f51803e2ad9ba329f

  • SHA512

    34c5f9957132b13bba91758df8b034be8aa6cc9535a679dbe256940b776d75f6c78dabc926cd2dc4bc0dca616d9a6cb7f22d67e0dcbc30fcc0e5c2614f86e83b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIE46:AnBdOOtEvwDpj6zn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_039701823b7e24e4a854fd1ce7ffe02f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections