General

  • Target

    2024-06-06_4aa46097351a6ce48b60c20487461e12_cryptolocker

  • Size

    97KB

  • MD5

    4aa46097351a6ce48b60c20487461e12

  • SHA1

    9914e201baa50ed5d835000b5205aab70965df0b

  • SHA256

    000921d66b64b08a5f935796c62d5093c6497ba80a29b5debc944ddf3da12980

  • SHA512

    c22aeff0becad3b7a7d8b4b4fbb353e3dc0a705cdf7513de7714feb407ce74ffd040362db5b85e3185d7c67e05039bed51985a491f4ae09695a0b65b007b7636

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01VH:AnBdOOtEvwDpj6z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-06_4aa46097351a6ce48b60c20487461e12_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections