General

  • Target

    2024-01-27_cf64b4e05bd50d4574a2db4e9ccfeaed_cryptolocker

  • Size

    93KB

  • MD5

    cf64b4e05bd50d4574a2db4e9ccfeaed

  • SHA1

    d62215af4f2a4dd8b05c2e91898ed645b77c0616

  • SHA256

    5c9fc997c923f0eb831446b8ada79c74c13b74eb40fddd7f8e4657ae7e474bc2

  • SHA512

    22bf734ec4b0aaba135dba5c1d839f72bd12a143961f8a4838ea97b619ff4f37956107207b87fbd5a02f66a0fb26418e32b3764d49e6b846f5b3f9e821e85cc5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01O:AnBdOOtEvwDpj6zQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_cf64b4e05bd50d4574a2db4e9ccfeaed_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections