General

  • Target

    2024-03-27_e30d690cbf08888eecd5aaf581cbfee8_cryptolocker

  • Size

    36KB

  • MD5

    e30d690cbf08888eecd5aaf581cbfee8

  • SHA1

    83f98c3870ac176a896a9e109250e020c9cab142

  • SHA256

    23ba70d32262954693f3001b2b2ea295e2866c01154c1a4c0a0b6d8981a369a4

  • SHA512

    a68672512d15e30dfd68c00f8efe390c83a9e0cb56e4d1a561e3832be7577964328f7e2e1b91e02d7723268742f49a6e77a605debb2d3643469b73252ac099b8

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+0:qUmnpomddpMOtEvwDpjjaYah

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_e30d690cbf08888eecd5aaf581cbfee8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections