General

  • Target

    2024-01-26_c30a87f9feef8c6f5f9cc8fc012b5811_cryptolocker

  • Size

    87KB

  • MD5

    c30a87f9feef8c6f5f9cc8fc012b5811

  • SHA1

    e652c4243f9fbbfb69171204af564b61adcd0021

  • SHA256

    4e8191fda05e9cf286dcf47f11f89db185f8bf2c84187f3511ac23e182332af2

  • SHA512

    1e3fb3bd345cb6146e442a4aa9123dff580411ee346e11eaa14926373b220942b79ca50131ca789ec3506ab20aee26b9d153779670d925eb30b33fdf32fba3a3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6Pv:AnBdOOtEvwDpj6zM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_c30a87f9feef8c6f5f9cc8fc012b5811_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections