General

  • Target

    2024-06-11_485be3716efebabe9d70f6df407f2274_cryptolocker

  • Size

    91KB

  • MD5

    485be3716efebabe9d70f6df407f2274

  • SHA1

    bf236f07f5adcb93e4db4ce760458897eee5a9c9

  • SHA256

    9ca4d3ce16798a0be25a594c52b0f98d7efc137d9d53de4618062ee2229f0935

  • SHA512

    99f13a2f3c71fc99bf80e18c7e88e303ef27cb81d76fa9862aa4c46a53b4dffbeb75684f7c89cd1d01f3622589b3e55a60ff0fbf6a0483d6b5eaecdda4e9c427

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIiI:AnBdOOtEvwDpj6zS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-11_485be3716efebabe9d70f6df407f2274_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections