General

  • Target

    2024-03-25_a64c5aeeedaa14c428060438e64cfa88_cryptolocker

  • Size

    34KB

  • MD5

    a64c5aeeedaa14c428060438e64cfa88

  • SHA1

    639577e23e57d9e7cb73e42c2b41e9f1b61ae6bb

  • SHA256

    0c2a3bc5ab672063fc26320b9188e15006e9a2e036f0995dfca054265a772ed9

  • SHA512

    b27d3abed9d2ce9c45f5425d294d29998b97ed97cd9e3f44fb0f628c6453eee8f90cd714308779a39117d9ec79c67b66d497fea7c593d66d292f4c5a284e800d

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axIN:qUmnpomddpMOtEvwDpjjaYac

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_a64c5aeeedaa14c428060438e64cfa88_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections