General

  • Target

    2024-05-21_1e123db130832250f1d381cc075192a6_cryptolocker

  • Size

    91KB

  • MD5

    1e123db130832250f1d381cc075192a6

  • SHA1

    29e17b540c4512aab14db2dc33cf2b42ff91bd55

  • SHA256

    a178389c68f56aec2a07237373410abd0dd14e567cfd1a632f569781af69e860

  • SHA512

    7a2286e7a33434aeb1b8bf71896d01d296181ea11f3a20f6effad07332f13019d22757d3a5a9faeedeac9be2dcab4b8397e06b77182b3b50be78fb935cb5e2d4

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddAz:AnBdOOtEvwDpj6zw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-21_1e123db130832250f1d381cc075192a6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections