General

  • Target

    2024-03-07_eebaefccc73717f446013e456dd266c3_cryptolocker

  • Size

    127KB

  • MD5

    eebaefccc73717f446013e456dd266c3

  • SHA1

    845d84f56898b135d9a87107572e04c1ca1f7f01

  • SHA256

    810e9fa388eef7876749bc0fc7308506f89f19a1e40826e021b5e9e822724134

  • SHA512

    8ea3636af97b1c4c0a64332b840bf6a36ccd85246ae701dea88e88af6ecdd99850cd59699d19ccc8cdd670ab5d7474433e70aeafef4bc6bcbbbb708014a8cf67

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIE:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_eebaefccc73717f446013e456dd266c3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections