General

  • Target

    2024-02-14_0d50c2c9b74bab2dc7ec042fc6dd3d27_cryptolocker

  • Size

    95KB

  • MD5

    0d50c2c9b74bab2dc7ec042fc6dd3d27

  • SHA1

    9a6528a1aff35254c63ebf376c6a14c62b35ef79

  • SHA256

    b48b528cea49af5ef6e40a004a3f34dcc096e65326f72a3e69fe10405e30f013

  • SHA512

    8b2625bb036908fc70ac872db948a319ea109dfab9cf02547bb860cbef3797736e9577f8025462098146d8adf8594c14a00061547e7f5256b284fbb533a18d49

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp015M:AnBdOOtEvwDpj6zg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_0d50c2c9b74bab2dc7ec042fc6dd3d27_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections