General

  • Target

    2024-01-25_479def4b2d58679b6574e02452b0a583_cryptolocker

  • Size

    124KB

  • MD5

    479def4b2d58679b6574e02452b0a583

  • SHA1

    a31de28d1e219a8061eac50d8503824204f84f5f

  • SHA256

    c2a230e081cb59f1a6b314effd4ce072c5a7c5b6d0a6313721c71cc2e8276657

  • SHA512

    f2c55a809b1f0f30a5e2b9cb914809d7a45c3df870dc133db1de47567c202a951b664bab5fcea0e3060f67f78f58c1d80c4763c917e141bed80b9e8c1220a6d8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eC:AnBdOOtEvwDpj6zs

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_479def4b2d58679b6574e02452b0a583_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections