General

  • Target

    2024-05-16_e8fe39138446bcae4d7c70d694f67fd7_cryptolocker

  • Size

    91KB

  • MD5

    e8fe39138446bcae4d7c70d694f67fd7

  • SHA1

    ebdb6bc4dfd026a9d32a3e45cf12a0680948ba28

  • SHA256

    866f13b3a4e3075e3312891e9e162b44523a35b56edc8c74122a57d5a58baf64

  • SHA512

    7d37fe857d5cd938a9bfb058c344a71e1ffb68ec7dfe18b8aad45ea068b5e68ea99917b887e722ea05843fa25c07755983efff80a5c9f9fb9f2c23ebc20338bf

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddl:AnBdOOtEvwDpj6zR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_e8fe39138446bcae4d7c70d694f67fd7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections