General

  • Target

    2024-03-12_5ab1a4dbe6abf6e5535d18d27773e19a_cryptolocker

  • Size

    88KB

  • MD5

    5ab1a4dbe6abf6e5535d18d27773e19a

  • SHA1

    48e757a2bc7722e97ee7a9079747ac983c3be1f5

  • SHA256

    f910b154ed17a7ee62e9f546c21adaf3789d2349f40af0555d0f44ec4ced7588

  • SHA512

    aa77c2d69163231ac2b5a394ed11c7e76f3449e058a135222f79e64764dcb946ff47df8ecf32103f9f420bdfbffa3f2be2d754996e292e344e4c2ad971fb2888

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7dUgv:AnBdOOtEvwDpj6zjv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_5ab1a4dbe6abf6e5535d18d27773e19a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections