General

  • Target

    2024-01-27_116e1aa9bc14f5da2994841474712a35_cryptolocker

  • Size

    33KB

  • MD5

    116e1aa9bc14f5da2994841474712a35

  • SHA1

    949e4eb060d29a7684ff151c70c9c323074fcfec

  • SHA256

    70d7b56b736d2ad23eda64a952e340ce13837d69e27d997e2111775d71e4f94e

  • SHA512

    9f3c128f65b4fcb39b82daed1191301eac0bd6a5f6b89db9b6de68fba2d8d2ec4e7ed47170c8c4fadd90bb9bb7f01c0a29639b48f3063b3405fa769a3edecf6a

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKpi:qUmnpomddpMOtEvwDpjjaYaH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_116e1aa9bc14f5da2994841474712a35_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections