General

  • Target

    2024-05-28_ee4e04bd44c5934c82a7f68a102affb8_cryptolocker

  • Size

    69KB

  • MD5

    ee4e04bd44c5934c82a7f68a102affb8

  • SHA1

    0d81f1b3918001587c830cb97140bd2f05480043

  • SHA256

    cd93e61d8f905703ac07c9568a02eb0f00b45199222463732ea4a3d3be78d92a

  • SHA512

    ca4932f53666dae37db8acf23c8cafc4a935cbc0af1dadb9b599f00ada9ed4523739c5056f3ae1ac3c384d64a07eda62d0afabe8405d77ce1a11f71c83d920c6

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe/:78SEOtEvwDpjWYvQd2Pe

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_ee4e04bd44c5934c82a7f68a102affb8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections