General

  • Target

    2024-04-15_da18130a8d0cc838eeb92572773d86a7_cryptolocker

  • Size

    100KB

  • MD5

    da18130a8d0cc838eeb92572773d86a7

  • SHA1

    d5458169eb3030487143d8986ceae78e0c5f5404

  • SHA256

    d08669a402616e975998f33225750b093c9902ae24979e355f70dc9706dd3009

  • SHA512

    a0859ae35f2f94db90881544b6fe65b1d03745ad959ede7c59f7afb8b798318606061aa0a15bcd9271db67fbabf991767776271e8ff0157cdb22bd3def5b3d02

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeB8:AnBdOOtEvwDpj6zD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_da18130a8d0cc838eeb92572773d86a7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections