General

  • Target

    2024-03-18_3a6d27b2096bd34c3d4dcbcf2964640d_cryptolocker

  • Size

    88KB

  • MD5

    3a6d27b2096bd34c3d4dcbcf2964640d

  • SHA1

    8b21028492c0f3b73316ee77283c6e80dc11b12c

  • SHA256

    71004ba059e241a8810750e370fa22a9607d36e74b0f74d7ccffe6f7ef1f6a0e

  • SHA512

    70507be0499e08c7ac0e440e0143c9d0e56e5381a460c797b44ce9ee2f39a3446d3f134fb469a25849623db2f8a1a7e3731bec743f2bf19cebe150d7d806064a

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgSM:AnBdOOtEvwDpj6zZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_3a6d27b2096bd34c3d4dcbcf2964640d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections