General

  • Target

    2024-03-15_a1234d22728a7097e671d5487554d541_cryptolocker

  • Size

    99KB

  • MD5

    a1234d22728a7097e671d5487554d541

  • SHA1

    b73337dd9e5a21ce70261153db15f698492bc167

  • SHA256

    21435b225f9e621928fa63fcfcc0d51e5b2a8ac224f424052eb9324ef6f96413

  • SHA512

    4a3291387079f5a8a8820e8be0a1b592440da0a4ba5938312f437c29db77fe4ebdd04c89b7778a5adda7e41e2b67f847a37aea3f75f689be8e62c88e644fc5b6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6g:AnBdOOtEvwDpj6zM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_a1234d22728a7097e671d5487554d541_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections