General

  • Target

    2024-06-11_8f9cb311f76993f5fa03bb0ee21d2e8a_cryptolocker

  • Size

    40KB

  • MD5

    8f9cb311f76993f5fa03bb0ee21d2e8a

  • SHA1

    ee6ab42081d1390ffd2c9a8ffddec092fea681fd

  • SHA256

    f09e39405cf12268c1e637c7b2dcf92b714229445459ba5372779e4ab0c4a76f

  • SHA512

    99284266882612b1f97d7f4ccbf2ebb2911f7c13030c28926c5dc1c21602cca627c52f5aa0f75a62581d1d18fd38b10d761ba5ee3707d5515ac2451b53fa9e9f

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38noysM:qUmnpomddpMOtEvwDpjjaYaQ89

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-11_8f9cb311f76993f5fa03bb0ee21d2e8a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections