General

  • Target

    2024-03-06_d1ed8d717b0564dd575e097831d5405a_cryptolocker

  • Size

    35KB

  • MD5

    d1ed8d717b0564dd575e097831d5405a

  • SHA1

    1292a16c3547817654658b225fc39084023c5c6c

  • SHA256

    06f5aa16895c0cb6d743dcb8e12356c2ada30f53e4eebe7b28feb9523dee47be

  • SHA512

    07fc5aae287976d01a6f778c5be8db6d4e8b8dfec18627becec8fc219a2c6b9516e9df609ad6ba80b9691290ec1d2326e1fdde62e3b1917fc2458182f8dc498f

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+4S:qUmnpomddpMOtEvwDpjjaYas

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_d1ed8d717b0564dd575e097831d5405a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections