General

  • Target

    2024-03-18_33ec501cc130a52e1afe6c7f98f7f88d_cryptolocker

  • Size

    94KB

  • MD5

    33ec501cc130a52e1afe6c7f98f7f88d

  • SHA1

    c4b1f960a8da141b5dc283dd098984b79813781d

  • SHA256

    49fae364d639bfd64c984572a5b3da45dc55adb8c4291935fd4d9295ee13355e

  • SHA512

    5f37d8e2bd99286ba50ba62545dcba9c70ea853e80311e71c78feb3ef1d4779ac59c3c41dac8dee8aa6dd626f8f8f263919463b0e612662ca6c0eaea5aebf85c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpY4:AnBdOOtEvwDpj6zi

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_33ec501cc130a52e1afe6c7f98f7f88d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections