General

  • Target

    2024-03-07_0641c8707a680456a8a476d6d9b94e81_cryptolocker

  • Size

    94KB

  • MD5

    0641c8707a680456a8a476d6d9b94e81

  • SHA1

    12c4e87f705cad2fe0a31d47dbce34f91dd82c74

  • SHA256

    ce977950a4babafc1b4577959374652196b0c4c91b758bc96ef9523b8cc2e13b

  • SHA512

    d7a394090f5a7493c9e1074f70a436f1791e0b54ec63e7bbcd483acbb098fc5ebfba6c822a97d1f754b9185e3c36d0ccf3546df57b5d8955b7e61fbe551e55e1

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYyZ:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_0641c8707a680456a8a476d6d9b94e81_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections