General

  • Target

    2024-05-03_c89010a370927f71a703bb3425495c18_cryptolocker

  • Size

    89KB

  • MD5

    c89010a370927f71a703bb3425495c18

  • SHA1

    b75ea5e7082641db33475d7ea0fbb70e3c43000a

  • SHA256

    56c726934522b517035843bdefde0c408da83508b44fadf462407c8c70cf222c

  • SHA512

    b2b0d05875a702de301acc29227092035beea611aff7e4bf64b888a857595afdf0708a960273d5611cf8ed368a91b5976a4f8e0303e5d30e67d44eab34e0030d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIiA:AnBdOOtEvwDpj6z6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_c89010a370927f71a703bb3425495c18_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections