General

  • Target

    2024-03-15_6fc23465790b29ea74d3c44b6f9e2aa2_cryptolocker

  • Size

    100KB

  • MD5

    6fc23465790b29ea74d3c44b6f9e2aa2

  • SHA1

    01ea955b9fbbddf76ba4675779a05f8c765a22cf

  • SHA256

    2916c42023811cc1a96894e4295f77a30d285df1ee069093bca4a036eb6b0fdb

  • SHA512

    1134457f68e1d0b19c99cd667c0b2ceb4fd28322d8df173157d86ccec8e57dba1bbea1dca3e67086d5e748d34295f817474582c9ae76d6b3d3d0a0a53ae4ccc1

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPy1C:AnBdOOtEvwDpj6zH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_6fc23465790b29ea74d3c44b6f9e2aa2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections