General

  • Target

    2024-01-28_5febc924399e131e35b20b6c6eec28ab_cryptolocker

  • Size

    85KB

  • MD5

    5febc924399e131e35b20b6c6eec28ab

  • SHA1

    f69d79edbebc18783c672bed7690513b2b122b3e

  • SHA256

    e484038e5c032567070faa589ffbdd9ae6467fc9d7e02d27ee80b97290c0b104

  • SHA512

    d52f4b36a55b07f34b1ffd5d7f34575c7c240f623e602a0d1522f627ee6a0980fd370a2489a9c403eb7f4c2a1b31d3309a9b67e1ed1f7860ff63ec655e474fa6

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIShwUy:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_5febc924399e131e35b20b6c6eec28ab_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections