General

  • Target

    2024-04-05_e28b272a1bc10f8ff4304c44e1f50a07_cryptolocker

  • Size

    128KB

  • MD5

    e28b272a1bc10f8ff4304c44e1f50a07

  • SHA1

    1447811d304a2e0352df739428758958ef10a033

  • SHA256

    493e18b67f28f0061a327409f78568525bbce87539a5a20f019a1440e320c064

  • SHA512

    65321edccabba77f3c6a0db8e038f144659bb51e5158b7faa8a659fec88fbafd0972559e6f24fc9e3e819a55d2256558196ad9981234b97cab29d0774aaf07a0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7r:AnBdOOtEvwDpj6z2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_e28b272a1bc10f8ff4304c44e1f50a07_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections