General

  • Target

    2024-04-15_d5c597eb8fc31944daf3b7575996e9cb_cryptolocker

  • Size

    101KB

  • MD5

    d5c597eb8fc31944daf3b7575996e9cb

  • SHA1

    6d7da594722f24467b1e728584e6331f059e0608

  • SHA256

    35754be2a2bc4445c97eac2e6e52c244c59b236d2c6bfd972bade8e102cdda7e

  • SHA512

    cab94c893cfe3e4fcc8fa9220dfac420e613df867446f4b6926902829a5cd15ec3e2b0cfa8c6074663622c227b6d9ef8efa9b39fed36ea8798ad0e2f2b4d2f34

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeB4:AnBdOOtEvwDpj6zv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_d5c597eb8fc31944daf3b7575996e9cb_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections