General

  • Target

    2024-03-28_db0fc759e429fa67c2eb924041309caf_cryptolocker

  • Size

    50KB

  • MD5

    db0fc759e429fa67c2eb924041309caf

  • SHA1

    0e887ab1e90e160af04904b60db0e7c34ac3ae0b

  • SHA256

    603d85b63e266890e9b71cd740d4d4fda25130f58550bd99db43e491b1916b3f

  • SHA512

    d8db7f4b351633e1f4a5fa09a65cf120323722cee095ee170f29b64f79957e5b30abfc01f6dcc44f5bbcf9a7f903f6f4e3e9778ea19639a083fb906f1ac7647a

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWLQX:m4Q2ckzIOtEvwDpj4HYQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_db0fc759e429fa67c2eb924041309caf_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections