General

  • Target

    2024-01-25_8bf0e984c6597fdc273b61da86880cc6_cryptolocker

  • Size

    125KB

  • MD5

    8bf0e984c6597fdc273b61da86880cc6

  • SHA1

    fd81220f2c51faa84484654ec491fe4866bb8dfb

  • SHA256

    ea8f1a560eb06cc56df10e99557cbe7121fa10dfc441e23e99776c522a9568eb

  • SHA512

    c79f7fa0db7caaab908e530ce4fdfe293f4b3ca84ea86e98e73b07b8480d4868a73d4d75d37a9d3b19e8c6810fbc15cc85640fd784cfdf3b83061f656506124e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1e7:AnBdOOtEvwDpj6zB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_8bf0e984c6597fdc273b61da86880cc6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections