General

  • Target

    2024-05-13_31c619dbc9abd515c05f3ea2c2d8a681_cryptolocker

  • Size

    88KB

  • MD5

    31c619dbc9abd515c05f3ea2c2d8a681

  • SHA1

    e1942ba51875f2943596cfb8776a69485d66ea77

  • SHA256

    9d681477eb9982da95c5b066c7e58621078078cf84dd4471fe471296517a8d1e

  • SHA512

    36e54e7f5af9aeb374873bdfed93eb79ee4f69a9b6569c190e24e864b0542bda4d4db6427569658d193ec5bc67f359df2e75ff3cb1be3e734b33c9b006f677ac

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgQc:AnBdOOtEvwDpj6zP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_31c619dbc9abd515c05f3ea2c2d8a681_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections