General

  • Target

    2024-05-20_6e2989770d90dc1bb83064afc28d28c9_cryptolocker

  • Size

    91KB

  • MD5

    6e2989770d90dc1bb83064afc28d28c9

  • SHA1

    a68ee5196f305f32511830177666a672ffdb9b28

  • SHA256

    5d3414bf1200d2f3a845ea67bf72bf8db0283a7f85f62f0ad5198a99411136a8

  • SHA512

    4a2a53175918d8075aa5ab6c4b915e7ae22c54dc318f378f1d6cddb77595d6087cfbe7ad16d8a85d3a7661bb8c6e7d285db38266d011a05aa4e1d98d6c5a53f5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddA/:AnBdOOtEvwDpj6zU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_6e2989770d90dc1bb83064afc28d28c9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections