General

  • Target

    2024-02-21_16aaffdd6acb20e5d6b9dd4e158884a8_cryptolocker

  • Size

    98KB

  • MD5

    16aaffdd6acb20e5d6b9dd4e158884a8

  • SHA1

    20d1e8737cb6d44765eb5656e88cb97bb068a5ac

  • SHA256

    0cad9eab9ca234c4bba58197737cc8d4d7bd83392ab79b633f83fdf0edaec2bc

  • SHA512

    d7a9cd3d02b74c3ca6036141ad0e6e985f9e563aa80eadd6554f6f936a0a7e7c933a3492ae1d11291d4f3fdeda0e616aeaceb99ee0312cc434c4c5e71d913005

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPGF2o:AnBdOOtEvwDpj6zPo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_16aaffdd6acb20e5d6b9dd4e158884a8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections