General

  • Target

    2024-04-06_6cf5536f9a94d87a38b487efe1f7b581_cryptolocker

  • Size

    35KB

  • MD5

    6cf5536f9a94d87a38b487efe1f7b581

  • SHA1

    64d5da66538fbe8d821a440e6e4de10085f07102

  • SHA256

    399c57fd246608555e4a1aa935c50118b05bc2b6c372143a582c27b33f45eb8c

  • SHA512

    bc29461f14afd5440c4a66eb1078d187b8aa396ad449c2eeb5e30be8d6643ae6ffda07a3563f0d4bbc03bb16d946649cf3457f11b4ed4774d02969718d28557c

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKC:qUmnpomddpMOtEvwDpjjaYax

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_6cf5536f9a94d87a38b487efe1f7b581_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections