General

  • Target

    2024-04-29_e0249a22b40271e4d38d29496cf856c6_cryptolocker

  • Size

    97KB

  • MD5

    e0249a22b40271e4d38d29496cf856c6

  • SHA1

    5fd6822f22992b34dffef452277a7a1643bb9c00

  • SHA256

    b570df8a67885269dbe6db5654f5c6f9a8a2d2806fbc9ab70731ef1c7c9da36c

  • SHA512

    0ca50d93fcabb46117ada4b4b8628c946207aa2c1e9c609260f9c544c817f71786c49fea495d002c6649299daca7da978808da88c0b946440b9e013b18f5f88c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYy9N:AnBdOOtEvwDpj6zo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_e0249a22b40271e4d38d29496cf856c6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections