General

  • Target

    2024-03-09_d00ee7dcd31cd08864dac658b67fb937_cryptolocker

  • Size

    88KB

  • MD5

    d00ee7dcd31cd08864dac658b67fb937

  • SHA1

    9b730df1f8e8b8aa52834389c73ad79278899ef2

  • SHA256

    c348c4de2cb9633ee53ad2682d2b9dcf7c42495df27338a8738c023966820fd6

  • SHA512

    a8f199f24348dc10442f8c02064c6cf67ca82da1d8ed9c2884b09275e9adbbc8b80f2bacc30c795118cd538f3deb25b77ca0687016af4381adf7dc6f91ee8636

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJY/v5:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_d00ee7dcd31cd08864dac658b67fb937_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections