General

  • Target

    2024-06-04_5d8c861245aecc3f121115ac60eccc2e_cryptolocker

  • Size

    90KB

  • MD5

    5d8c861245aecc3f121115ac60eccc2e

  • SHA1

    c7f01962b0d246e022c25b9f2eeced8f49380c41

  • SHA256

    af5358b9d6dd93197816456341f7416fb48c69a502c3e03e6fe4b8e048663941

  • SHA512

    025a4d270058a4e08b15be35093bed671d7a7147ac4b8b103fbd48b301c83b5a1d0fd067d3cc30e6a98ae40d981242072c3201404aa5cf05d01738dcd3ad9283

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODw7:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_5d8c861245aecc3f121115ac60eccc2e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections