General

  • Target

    2024-01-28_fe80db1a1a4210430a2c8380e02f8215_cryptolocker

  • Size

    125KB

  • MD5

    fe80db1a1a4210430a2c8380e02f8215

  • SHA1

    658b3507a502da2c97baa1122c2818d079a66f08

  • SHA256

    38938bd0eddf1ac32453cbb5b0ec749523072e699422305c002e80599cecebd2

  • SHA512

    8a37a580368d351de1218a5c9f361fda9172e6f433924b94a74162c50642640292fc982d2629255da442d6bcadcb0ceb2aaef1014cc9ef4b63d16befaddb9eeb

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eG:AnBdOOtEvwDpj6zw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_fe80db1a1a4210430a2c8380e02f8215_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections