General

  • Target

    2024-02-12_c69b850736f50a2b443f890fc55ffbb8_cryptolocker

  • Size

    86KB

  • MD5

    c69b850736f50a2b443f890fc55ffbb8

  • SHA1

    42049c458c5660ee78f2a897d74947d03668a1e5

  • SHA256

    00ecf13e86a073db64ac6fd3796f5ef90949782b572ac7f24ab150cb2323c9cb

  • SHA512

    4d66822369c1273034e625f1671cb335a2cb04551e21132d44e4d6b726cb4868baffdec260ea528f03fcaac7f76a9d2b62013108afb6b68b811f2cb5a7bd2112

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgL2:AnBdOOtEvwDpj6zu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_c69b850736f50a2b443f890fc55ffbb8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections