General

  • Target

    2024-01-22_f06470abbad393a097b604199f02e30e_cryptolocker

  • Size

    92KB

  • MD5

    f06470abbad393a097b604199f02e30e

  • SHA1

    fee4af4590e2da1ab24db6dd2aadbe2a7d245d82

  • SHA256

    325aed2aad2b7960d460f25c727660e44281b0e05bf458090afa4c6f55b98f55

  • SHA512

    e8bcfb6f89129f41503b2becfca7a24af716411f12a3468460a7788d5b1a2dd9d7f1b43d39d4f4b2972a93161856f0606f39204e9302580f3b2386503b8ff669

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0QVOe:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-22_f06470abbad393a097b604199f02e30e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections