General

  • Target

    2024-01-27_150497ddcf6b2f4764ef3c65d1c6c8e6_cryptolocker

  • Size

    86KB

  • MD5

    150497ddcf6b2f4764ef3c65d1c6c8e6

  • SHA1

    0c3656f95c7f9423370f16bffe616b7100a8214a

  • SHA256

    abe5aaf013934c461577b5452c03f5f20055e08a2258c812e592d00302c4c309

  • SHA512

    d025c266e43794b693851d9f64a80dc29c69b6861570a17b3e23301fd1c20774aafdce070c05143fdac2c22a03c0778a1ebb206bd3293566a0b2296a115e7383

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/R:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_150497ddcf6b2f4764ef3c65d1c6c8e6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections