General

  • Target

    2024-05-24_e8a4187803872ffddacec32113db12be_cryptolocker

  • Size

    72KB

  • MD5

    e8a4187803872ffddacec32113db12be

  • SHA1

    72f58d90e23371c203ba53f39bf3301ae8912a3f

  • SHA256

    d6ceef6da649bc69c486be93f320afd5aaa73caf3ff34edf6ba8b2c7689aaa95

  • SHA512

    03cf66b6360916ae6291f0034f6e52b1e8ddcb682a9d7218d75f7e594c43545303dcc1e721d9ab1ea941f10abdc8088454d2ce1485f835843a52890fe2390231

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95L:C4Q2c94OtEvwDpj4H8zM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_e8a4187803872ffddacec32113db12be_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections