General

  • Target

    2024-01-19_42535e9c8bb5f3d9a9a5361a5cabf67f_cryptolocker

  • Size

    86KB

  • MD5

    42535e9c8bb5f3d9a9a5361a5cabf67f

  • SHA1

    fa0848f3518a9796130c8a3d09872f05ea521d98

  • SHA256

    ec15d74ef631ad7e1b9bca16a4219b40e52678b29a928ff283333fd12c6bc744

  • SHA512

    4b8e721222136995f11c6d80089c9fd693b9966aaa10ec07794fe54590d80fcea8475c2b0bc74f29bf73aea3ce3f2fdd387dda7227c7f3b1af085aa0e0a80a98

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/B:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-19_42535e9c8bb5f3d9a9a5361a5cabf67f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections