General

  • Target

    2024-03-12_848a485b4fc33a45b1c3de9fec24fbc1_cryptolocker

  • Size

    94KB

  • MD5

    848a485b4fc33a45b1c3de9fec24fbc1

  • SHA1

    f49b34a29d747413747b152e3e91381ad0ddf1cd

  • SHA256

    d54ec80e8f0a2ddd0435404fa92cd1c1d5069f27d555254e31989b96549f6ce7

  • SHA512

    6f835ddf1e48d52dbd6464a9f488aac98dfe32198b740519a3418d4862b206c858ef45adbfe1bf9b218d10f14c46b6929152405f67dd87b9d92585ece6a1ed3c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01ob:AnBdOOtEvwDpj6z8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_848a485b4fc33a45b1c3de9fec24fbc1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections