General

  • Target

    2024-02-14_e80b97635de43dd1f6ba4ceb99d75852_cryptolocker

  • Size

    99KB

  • MD5

    e80b97635de43dd1f6ba4ceb99d75852

  • SHA1

    f15e33d5c51a8d8c02aa57de12064f76efad5232

  • SHA256

    f66a3a7c85b8b6e54e4a5c00ac401bcba809827642fd66dc766a8abe66dff2ef

  • SHA512

    4bac3bbbfa2354e4fdd8f351948b6b4afac62d71a0433b04d21ed6f4d78e849f25e3d5ace7bd6af0ee3cce2cc7f32d72827b7cae0da5370a203f937dc968aa89

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPe/z:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_e80b97635de43dd1f6ba4ceb99d75852_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections