General

  • Target

    2024-05-14_df47fff8023c4659f1a89fd41ae896d4_cryptolocker

  • Size

    90KB

  • MD5

    df47fff8023c4659f1a89fd41ae896d4

  • SHA1

    bc3824db059ce77298b1e18bd4125accbbf3976a

  • SHA256

    49bc7c44d53eaa7d8413b234b57f53686383ef4446da5cf3c66532c3d09a95ed

  • SHA512

    fca195ff60c5a0de766d536b34a725be42b91ea8f7ffe21b50de9b6c829876f8493b5df7d14276142d84255464f08fd4d9e9403b098c44c9015447f614e01760

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddt:AnBdOOtEvwDpj6z5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_df47fff8023c4659f1a89fd41ae896d4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections