General

  • Target

    2024-02-13_5099f1199d1b7b5c23a5f706728bfc0a_cryptolocker

  • Size

    34KB

  • MD5

    5099f1199d1b7b5c23a5f706728bfc0a

  • SHA1

    f50d116381fa3e6097c44614760f90a9f926bd45

  • SHA256

    d341d1ef1fdc1361f585646a4c534ca8b338436686b034ba95abd7029acf09ff

  • SHA512

    7b18e9c3c8e6f23c0b9c8b553e13dcc41b66fc669d1a2c85c4f152270f5c50548be18a3ec3e3db04091313956a09c92110523d217dc046e4366f46c89654e821

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+3w:qUmnpomddpMOtEvwDpjjaYaWw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_5099f1199d1b7b5c23a5f706728bfc0a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections