General

  • Target

    2024-04-23_80f7213790e27886821864cf8938e51a_cryptolocker

  • Size

    36KB

  • MD5

    80f7213790e27886821864cf8938e51a

  • SHA1

    abf98a52373278fa1e396d6997ca4f79b7c02c2a

  • SHA256

    998b6e26a9899186e029f4952b46164cdda012d43c724ed3113d70c60f5f3532

  • SHA512

    1201e1560c20777b21a0b9b4b7ee745021dc3c0648c738ef2a4b94da189648ae4da92a28b3cf9660fa5aa1fa9a03d4e96ff8fab4016c7cb6a836e89a8929297d

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3VK4:qUmnpomddpMOtEvwDpjjaYaQz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-23_80f7213790e27886821864cf8938e51a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections