General

  • Target

    2024-03-10_cfafef5c960b37a3c1eedb0084f42e60_cryptolocker

  • Size

    34KB

  • MD5

    cfafef5c960b37a3c1eedb0084f42e60

  • SHA1

    5d7ec1dc29319b0af46445ee072a62fd53baf8ac

  • SHA256

    778f8aa0e554c89c17285ab7aec51a7a5993563f9b1c22f27fc1434c14ebde44

  • SHA512

    463dbe648944f4b216789f0865390d813401ffdf0eb619623c9aa0664cc0698d85605be60b4cf70047763f6235797f02a0f74870645fe770af4e545f52c5b083

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKP:qUmnpomddpMOtEvwDpjjaYaQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-10_cfafef5c960b37a3c1eedb0084f42e60_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections