General

  • Target

    2024-01-24_4bfaba76839a4029b91db89f5508bc01_cryptolocker

  • Size

    125KB

  • MD5

    4bfaba76839a4029b91db89f5508bc01

  • SHA1

    172b0dd3ea2bf5b8184a717f878a24b1b16bc960

  • SHA256

    0a7936e983e71c9c079648d822ddc4de7d391bd36164d68b118196fdd25e1a97

  • SHA512

    565e2031f632f80f0468b6345a24134059c4e301c49cca81939a5795cd75ba8978c7914c2992ea8afaf4c0432e904d437964a2f0391b4624cb34cbba786a17a0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ej:AnBdOOtEvwDpj6z5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_4bfaba76839a4029b91db89f5508bc01_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections