General

  • Target

    2024-03-08_265c941129494f5a28e5396be48cf18f_cryptolocker

  • Size

    86KB

  • MD5

    265c941129494f5a28e5396be48cf18f

  • SHA1

    8f31484266e7e0391a5bb6b543660c7ce386c493

  • SHA256

    f395266afaec4e6e960aefd69d0fa69fa1a59f39bae19a549e633cfd724558de

  • SHA512

    ee60d8741d8b43624bbe35de0d310c0c70212b4095bb8fb863f8759b27dd1e65d822c76e8367affca02fc43e318b2d3fb645493fc8cd3daa1c3f9e8d625eed8b

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgjz:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_265c941129494f5a28e5396be48cf18f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections