General

  • Target

    2024-03-06_a3a9defc1c9aa3dfd8484df58e2a8cd6_cryptolocker

  • Size

    100KB

  • MD5

    a3a9defc1c9aa3dfd8484df58e2a8cd6

  • SHA1

    ad7df04b6d31de7f8327ac58a94e99a2a7698d93

  • SHA256

    0f40b974d788c1e42e2456dd2a4a64f016574166eab5e1f3855a756c313704d3

  • SHA512

    5ac4576cd5f7db639a31e3227865b9830fd1e357c3597470f90ad43c0323d9835f1cecbf5eefaea31178654f864233a6997105b1421393d5de83a9e3a348bc3c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6z:AnBdOOtEvwDpj6z/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_a3a9defc1c9aa3dfd8484df58e2a8cd6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections