General

  • Target

    2024-04-15_6eaea485fcf7f7b0b04fd511fe7cb8fe_cryptolocker

  • Size

    37KB

  • MD5

    6eaea485fcf7f7b0b04fd511fe7cb8fe

  • SHA1

    d6d0842d4934326c8fe50c452334c60c633621d6

  • SHA256

    703d08f104c335b9cbb7953eb6a7c84752530cf2df17fdea45289331bbc22e91

  • SHA512

    05c9a25e1796889bbd82b15421a387c7705fa6d53ea3e375e5d90e769a3827340555aac8cabe81f3842280b152070b1165d8b36e54deac8679d7275772d98188

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9C:qDdFJy3QMOtEvwDpjjWMl7Tp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_6eaea485fcf7f7b0b04fd511fe7cb8fe_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections