General

  • Target

    2024-03-08_e4b8ebb0e2b6fcc4cb255cfecd178009_cryptolocker

  • Size

    102KB

  • MD5

    e4b8ebb0e2b6fcc4cb255cfecd178009

  • SHA1

    422e05a50696f4828076d81fb09fecdb19c3b9a9

  • SHA256

    8be800b443ccb7c904a1c80bc74a0bb311fa7bc8df858d4ea9eaa16933db294f

  • SHA512

    f1386f30cca1838158c5be163c84e86e1799e359d74464ffc9b053222106f98fd7d38aae31ff4cdcc8a641380637b68a84c570d9b805d8393f0fd5addaf4b5d8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixHm:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_e4b8ebb0e2b6fcc4cb255cfecd178009_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections