General

  • Target

    2024-02-28_e2d98b7b52ea5793866a80f814f835b7_cryptolocker

  • Size

    87KB

  • MD5

    e2d98b7b52ea5793866a80f814f835b7

  • SHA1

    56b0fdcbe6ee114d0424f4d7fba1cd31bf8f381a

  • SHA256

    4b5b27de4ddf29e8e542dcf214a06784288c5a222be87efe2ebddd3f6a74a9d6

  • SHA512

    79f55a5c366edf89ce7f1feffc1342d4775987479b15e25972faa5e4ce3f1dd996b828955c8429560a9b4189bfc2f8db92d3cf1f92576bc68e7e8a4ab4630424

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISGM:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_e2d98b7b52ea5793866a80f814f835b7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections