General

  • Target

    2024-01-19_f4717e487eed6a35cad1bd69e729d5b5_cryptolocker

  • Size

    93KB

  • MD5

    f4717e487eed6a35cad1bd69e729d5b5

  • SHA1

    a4a8f18a567abad5ce6de3a9102c44e1b85e8b8b

  • SHA256

    4c5d0cc6dab59c74ab0f207fe4fea66aabb7d3d7e00b7db5022ca201326aff93

  • SHA512

    47507ac47af3971eaefe8834dd729a503eb662285b43b7c9bad9883d95aaf8da5a4071be3efb05989163eeb706be23e71955076a4b0724982e0c9e6a3b78ac8d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYj:AnBdOOtEvwDpj6zN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-19_f4717e487eed6a35cad1bd69e729d5b5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections