General

  • Target

    2024-03-19_ce6d5a66bc9f322673beb28a1add465a_cryptolocker

  • Size

    87KB

  • MD5

    ce6d5a66bc9f322673beb28a1add465a

  • SHA1

    bf331b63c517a0f1232dd16b1a33459ae276c59a

  • SHA256

    7a7f80d0380f9b0c21f65780d4fe5204fca0ef682e9395e19275bebf9499e722

  • SHA512

    1aabc4352b9272eaf27182570b45a8a4536d920c9169b3c6d89f6ecd330c97f2827e5e536d9e744463dcf020efdb51b9d61640f3a1bfdd499ec11b40af0c6a3b

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/T:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_ce6d5a66bc9f322673beb28a1add465a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections