General

  • Target

    2024-03-26_e443544c2d36c96ccd5ad2aa7bb0bbc7_cryptolocker

  • Size

    100KB

  • MD5

    e443544c2d36c96ccd5ad2aa7bb0bbc7

  • SHA1

    972a607f01371b4ee3346bf4ac497b7cc112663e

  • SHA256

    9d3833758f344a0440f260b3d0fdbfd7c21695eb7a0e55a4fca3e71b986e2e4f

  • SHA512

    91c81d06587698212c9a89f042db4d57cd1c4a18116b27b792178f06fb6d9ce37672945c8f475c6fb6272e939bc64ced91ab15eb9b0b5a76b16731fa7df24b72

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPy19:AnBdOOtEvwDpj6zk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_e443544c2d36c96ccd5ad2aa7bb0bbc7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections