General

  • Target

    2024-06-13_ef968f68d7131eb9b8c0a42da369c752_cryptolocker

  • Size

    102KB

  • MD5

    ef968f68d7131eb9b8c0a42da369c752

  • SHA1

    a84475995edd59240bae3a4945a39958bc8ac38c

  • SHA256

    fa2dc4c12dad8e4f979c33f607fecd38f6f7fd6eb23124fe07b6a0e25be14e56

  • SHA512

    132792cbb899b91d3703b0737b3b3c7705cde8ad9377218efb0be285850aa9b1299cf209880df88466c37e31242f533f286470dc460377e22aa2b2cf4381b93b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBr:AnBdOOtEvwDpj6z0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_ef968f68d7131eb9b8c0a42da369c752_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections