General

  • Target

    2024-02-21_81a879043c4d2a89f778f8f110771924_cryptolocker

  • Size

    34KB

  • MD5

    81a879043c4d2a89f778f8f110771924

  • SHA1

    0ce28f9d980641aab363859d30ff5ffa4a8e018b

  • SHA256

    d5324c1d17f7c7f25141fea558586d8e4ca1921cf97adff3f3a3c29fa8d81daf

  • SHA512

    a1574094a67db8cbab3fee7a3d4f245eac1c791d15a75fa98a850f638d8b45329bd3f0b1888adbee2c4afcbe032528a0c0707443af4eff35df12ada3e6f6a520

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axR+:qUmnpomddpMOtEvwDpjjaYaX+

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_81a879043c4d2a89f778f8f110771924_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections