General

  • Target

    2024-06-09_d24af8e9211ea3b296500eaa2b8ca76a_cryptolocker

  • Size

    102KB

  • MD5

    d24af8e9211ea3b296500eaa2b8ca76a

  • SHA1

    cdd3e269c22d9b6d76f4b3e4baf7d9027619b4d7

  • SHA256

    5a3c500bcb1207535f9bc219e94ba23dac2267aa50aab6e38e9dee6d294d2894

  • SHA512

    3141fada303cd326a72f1a61c4bfd7cbe503254f2ad116ce06fa616d8de52a72ce09692d424fb53e47fcb89caa3bc75a0116c87060f933dc8da68e78ca493be7

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBc3:AnBdOOtEvwDpj6zR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-09_d24af8e9211ea3b296500eaa2b8ca76a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections