General

  • Target

    2024-03-07_24c9c920cc5a5ec6e4a6ddb799dd21e2_cryptolocker

  • Size

    88KB

  • MD5

    24c9c920cc5a5ec6e4a6ddb799dd21e2

  • SHA1

    9e6182bc505a261a9c62b37833d72ee8e319eec4

  • SHA256

    23d68921a12a7b05ce70a7a77020a0843f4bb516e44df5b5279006ea5f55a14e

  • SHA512

    2fabdd96f88c0f0f3601f6e9255e16d4ab9cbe9b7ed7d1121842824376d83b8c8d626f244f5725ea5fd5a2f7f0695e399ee41b880262c1fad102281b2defc785

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMghB:AnBdOOtEvwDpj6zT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_24c9c920cc5a5ec6e4a6ddb799dd21e2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections