General

  • Target

    2024-02-28_a672d5c760a39fcbc0a8b0b8928e2b46_cryptolocker

  • Size

    100KB

  • MD5

    a672d5c760a39fcbc0a8b0b8928e2b46

  • SHA1

    7b7ce3aff59b16633dfc20dc3ee0d5e402c8f297

  • SHA256

    578a7b9dc3ead81a1e42879761c62cfc9db746591b5fce736d42c1f11efed034

  • SHA512

    aa829a79244a119b0bc0340852f3af812edd12b9207f760a6aa513adec4f4436670b1fc4379c63bf8bcb1e0a2c1e4cb181fb7ffaaecbbee520cf80c51e31ecd3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPe/t:AnBdOOtEvwDpj6zs

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_a672d5c760a39fcbc0a8b0b8928e2b46_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections