General

  • Target

    2024-03-19_6a1b6d1d82d364507bad3785c11133dd_cryptolocker

  • Size

    93KB

  • MD5

    6a1b6d1d82d364507bad3785c11133dd

  • SHA1

    41781c6ec86d74d36619cbd52c3db7dfc1d11e15

  • SHA256

    72baa47d9b38a91620dee0f1123573b4fd3adc3a929a798629d5a728170d713c

  • SHA512

    3c03032d36e6e849d8db48146047ec584424c91a92c20c6ccf477570f1ccf4ad7cd952bc475b6e6a504ee6e9f58234960c9e13f1b8ef427071e0bc335c1d95fc

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwbrZSD2D:AnBdOOtEvwDpj6zJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_6a1b6d1d82d364507bad3785c11133dd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections