General

  • Target

    2024-05-11_a0c0c525f32cf8802c562e0ce40ba3a8_cryptolocker

  • Size

    70KB

  • MD5

    a0c0c525f32cf8802c562e0ce40ba3a8

  • SHA1

    98e571f5b1333a82611ad45af4148c8bf7fb50cf

  • SHA256

    59c43135bc3a27bdd90dae79e5399f224aa0d4878cba56b9cd6d14693d2fb0d2

  • SHA512

    d0733529b525189923221dbfbb6d44c51f24736fdf575c2d9896eecb471346566dcc74aeba3e630fd903ef3f0f1b173f48e05e9cb7385bd12d9c75ff42a97f86

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9y:C4Q2c94OtEvwDpj4H8zn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-11_a0c0c525f32cf8802c562e0ce40ba3a8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections