General

  • Target

    2024-01-26_c4794751ed4cb81bd71570728a9f0670_cryptolocker

  • Size

    127KB

  • MD5

    c4794751ed4cb81bd71570728a9f0670

  • SHA1

    5588525b378c9d45708e75658099f942aca6fc77

  • SHA256

    bb0d76e7f2a33b665b4eec0cb15a96a21baab823d80c5979b47417df184e97e8

  • SHA512

    313270a96e8a10c7aaf62d4bd2bfa5d59b8f056ec352bd46e88434ac734cc9c1e2be1f9f818d984a1c2900c54a2413537ace7d82069cc7225b4e0aca63dbbfaa

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ee6:AnBdOOtEvwDpj6zP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_c4794751ed4cb81bd71570728a9f0670_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections