General

  • Target

    2024-02-21_216e1f7bd2c8ac0c91fcb71a89330ee8_cryptolocker

  • Size

    99KB

  • MD5

    216e1f7bd2c8ac0c91fcb71a89330ee8

  • SHA1

    6b0e541ff4fbaa3a20c16c767550e97dd1ff2908

  • SHA256

    ef30986a9eff1445da4e7a86542a1a21c87e5dbafb0fb3c3c2202e6cac950828

  • SHA512

    c4a36f5b03446ba08b3ccb8b10da121bfd2b10df8dbcacb2a29d1666af21b2710e2b70bfc7c02c7ef944f44e1f7eb4121ca6a0a234d48bce5021d8cfc20bd6e6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBg:AnBdOOtEvwDpj6z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_216e1f7bd2c8ac0c91fcb71a89330ee8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections