General

  • Target

    2024-05-30_0a56bf6f64266a5e940affb8f5029276_cryptolocker

  • Size

    91KB

  • MD5

    0a56bf6f64266a5e940affb8f5029276

  • SHA1

    e11a0aba05e906530e707e8c79eb9f4651344513

  • SHA256

    bef2831541a2de961d5745c60ddc47f9f368fc9f89367c388e9267750028c490

  • SHA512

    f61502a2f8512368c25d7cec4e2f7632cf6b67152ea96075b9e5ecf2994b60cb698223deae405eea47f5c8d06f000a1dec6058424b6af17671f0a119c1987af4

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd3:AnBdOOtEvwDpj6zj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_0a56bf6f64266a5e940affb8f5029276_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections