General

  • Target

    2024-05-08_4b44bd5f3b3037c0e8e0e7e6320dbd2b_cryptolocker

  • Size

    90KB

  • MD5

    4b44bd5f3b3037c0e8e0e7e6320dbd2b

  • SHA1

    3c50c44a44a2d4090e5c7dd83d0231f39389de63

  • SHA256

    b6c28b1f60c1e0203752522457df3bcbe50072efe812cf186fa6d37cca070a70

  • SHA512

    9fbf0cf22c4a1b4c8e50198f82a6e63536a4033ed555b7a3c688c38d96cb48e460c80159889bed2c65ef47e47c132762b7547ad6b18db5c0823d732a76e36825

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIi5:AnBdOOtEvwDpj6z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_4b44bd5f3b3037c0e8e0e7e6320dbd2b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections