General

  • Target

    2024-01-26_fac35e862fd269dd3b23c437306e8cb2_cryptolocker

  • Size

    91KB

  • MD5

    fac35e862fd269dd3b23c437306e8cb2

  • SHA1

    9f65a49534d21831e8ba9c3a2b175b62df67ebe4

  • SHA256

    b35ccabf33f1e6dd06ebfaef2e0b88d0b36cbe1430df091ae752a7a9e5854f99

  • SHA512

    dca4f78e3ca3d27c3d557e2d1178488a09a61942c013eb758ab71d161b3f5ccd6797810058e7104df2c6d7523c65ae6b33ee8c87a2cd8d063ff039b497791bb3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0f:AnBdOOtEvwDpj6zn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_fac35e862fd269dd3b23c437306e8cb2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections