General

  • Target

    2024-03-07_78153544d9e791c1d41e2e23ed67e298_cryptolocker

  • Size

    125KB

  • MD5

    78153544d9e791c1d41e2e23ed67e298

  • SHA1

    563a33ec81a4da66db4504ce0c51aa309a304249

  • SHA256

    84b2e7d5746584f1a52d05a68a956c402944e301e5c2bdb7a0b2439bc172c643

  • SHA512

    e5f4529723d627bf2beeade1a29d4f7e465cf469ec18b26f12e8fe0e683337bad09222de9448edcc37be8b50a1c5937a57788d8bc26d8c90767f4b13b5629331

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e0g:AnBdOOtEvwDpj6zb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_78153544d9e791c1d41e2e23ed67e298_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections