General

  • Target

    2024-02-18_55db6f1d1111f3bb7d09adf21261e6b3_cryptolocker

  • Size

    87KB

  • MD5

    55db6f1d1111f3bb7d09adf21261e6b3

  • SHA1

    e5b254fba146f5c60708778f413c571e14d5b793

  • SHA256

    b836c045d7ae882351dac573130ffd88bea78af22071bbcc735f5f474b4ac4c0

  • SHA512

    5a0dbc6d41184aa89003fb56cd4c627faf7e74881dded13178a87aaea8170e8dabe8ce1daeb05dc789faff44a4e851e34546d105476919f2b38da5ebed919644

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7O:AnBdOOtEvwDpj6z2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_55db6f1d1111f3bb7d09adf21261e6b3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections