General

  • Target

    2024-02-23_bdd34e6dcef373d2cfddd9479f56e33a_cryptolocker

  • Size

    85KB

  • MD5

    bdd34e6dcef373d2cfddd9479f56e33a

  • SHA1

    1f7c052b3637c43108c053b17b0a161485f778d5

  • SHA256

    96c6f718c4f7853cbb4e1a2fddc54899aafc2e864d0ae268c4e6ae1010501f40

  • SHA512

    42726f76f7d50998000f7f68040c8dccaaa1fa8c2623d1aab408836430630edd5dca757c0c7d35d45ceebaa15c49e5309247ea5fb752ae9e8e4f6908fb31f65c

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgjz:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_bdd34e6dcef373d2cfddd9479f56e33a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections