General

  • Target

    2024-02-13_e169d1802b362ec1c5cc9ee85176a029_cryptolocker

  • Size

    125KB

  • MD5

    e169d1802b362ec1c5cc9ee85176a029

  • SHA1

    ffe183658a6ddca85cd3a96b498d5c44466bfd4d

  • SHA256

    1638a19d7f97e3aee50dfc67ef8167711932377e32cab79ef647965b9d750e0f

  • SHA512

    183a529f38b22de3d0cdc9458c121123a4e0bd3e0bda00ee2d3fa85cb097838ce5bb3d8290a6b9bf678e24e0e5d029dafc966ecab75263c0ea05766321616fb2

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e3:AnBdOOtEvwDpj6zN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_e169d1802b362ec1c5cc9ee85176a029_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections