General

  • Target

    2024-02-19_5a3c56a1c7f4cfd89b06fdb7e8793c97_cryptolocker

  • Size

    101KB

  • MD5

    5a3c56a1c7f4cfd89b06fdb7e8793c97

  • SHA1

    dc40f06bb2cfe96df104263b19092db6ef1317ec

  • SHA256

    ac723e8392420db7a97d60b6004f804c3d979e5cd1b706b3662e745627aca59e

  • SHA512

    2a4336f74fe78c0a840d6a7ebca78ce4c826be9b486e436232cf9bd90852796e98dcd2970ab064e79cc69ae24ba58797f0d3e1cfac3e64a7553c6d41adf78b2e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixX:AnBdOOtEvwDpj6zU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_5a3c56a1c7f4cfd89b06fdb7e8793c97_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections