General

  • Target

    2024-05-09_f18cc7299ede06527cad83264a3f8a12_cryptolocker

  • Size

    71KB

  • MD5

    f18cc7299ede06527cad83264a3f8a12

  • SHA1

    f9bb7c5b12fe439d21cd230dbff7307210da7130

  • SHA256

    eb3b58c0180cf9623c2acaf00e3e7f70816791293d8f5095241ecc0ac61fc65e

  • SHA512

    5800b9496ac08cae56012bc5d801762ae9488ee01947c37863c0b0582764aa424604df6972a227385d4bff3af9677f2d3fa12cb76eee2f3b545ed922c4b952fc

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9MX:C4Q2c94OtEvwDpj4H8z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_f18cc7299ede06527cad83264a3f8a12_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections