General

  • Target

    2024-02-17_3efa80e3d2c7392c3475c28de78cd258_cryptolocker

  • Size

    95KB

  • MD5

    3efa80e3d2c7392c3475c28de78cd258

  • SHA1

    a27df42c6a2ca0536712e42df4a9fda486e48d59

  • SHA256

    1b2c4d63d0a99d1178309df1b7f13d9a012383314e5e6f6b7abb94ff25fcdffe

  • SHA512

    7c3e3876e988afd26543108bb44faf50ba6d332e5e1095c906c74bd2daec7fabfecd78da474dabfc6b9094e21217044fa8958f078c8efeafe30ab174376da17f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01m:AnBdOOtEvwDpj6zI

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_3efa80e3d2c7392c3475c28de78cd258_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections