General

  • Target

    2024-03-28_e496713ca35412b92f20645a2d643601_cryptolocker

  • Size

    125KB

  • MD5

    e496713ca35412b92f20645a2d643601

  • SHA1

    ce3923be0ec67ea1bc332d10cacbcccadf40d4bf

  • SHA256

    e686f463dcebb1280d9c5c73a15362b28e3230787085dc4ef809772e371de0cb

  • SHA512

    2a094c6fdc84a187e292be5e641ec13f59616edc59986a4a18f572bdbc223c568cda1825d5ace8b5a1df5d0d638ffe678934f687d3ffc53ddd64704da2cc36b5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e5:AnBdOOtEvwDpj6zj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_e496713ca35412b92f20645a2d643601_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections