General

  • Target

    2024-02-12_5e63fec701b10b32e84f8cc4cf83d0d3_cryptolocker

  • Size

    87KB

  • MD5

    5e63fec701b10b32e84f8cc4cf83d0d3

  • SHA1

    0321caba94c1f0a7abcbaa2ebc47d6990eb47850

  • SHA256

    33531960acf9e467efd399cfcfdd6b46ddfb2110bc3917db98f169a38c896f56

  • SHA512

    e835877e85135b378643c1b78526dfe4be31497fe72f032dbf4bdb531ac962b7e5d5f023c7569dfcf5a54dd11ed257c8cdb5dc5446625d73f814f6bfdf890397

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLp:AnBdOOtEvwDpj6zB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_5e63fec701b10b32e84f8cc4cf83d0d3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections