General

  • Target

    2024-03-19_e15025a84eb967075014622063006ca0_cryptolocker

  • Size

    129KB

  • MD5

    e15025a84eb967075014622063006ca0

  • SHA1

    f94c865b1757c909a94d951d685d3483a8dc2f3d

  • SHA256

    d1b799bb8b256386a434b1ebf30258e5b9299e39729736d7f98b67ef1f9fa196

  • SHA512

    22fe86b52f30a287b2ca054a2a0130428695995718f26103a0608a2bbdfb399cfc490c2363e696e3c0cc484049277bd8fe66c7b3916ff56abeb41e9da6bfa407

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eexC:AnBdOOtEvwDpj6zJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_e15025a84eb967075014622063006ca0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections