General

  • Target

    2024-01-28_a6e3ffaa8c8bc52bacfc9adaaf0a6bab_cryptolocker

  • Size

    87KB

  • MD5

    a6e3ffaa8c8bc52bacfc9adaaf0a6bab

  • SHA1

    3502a0f954233a4e9991d9adab8ad7392fa708f4

  • SHA256

    60fc5edbe49af96d0afc41bf4ef09fb5d5877e6d629bcec571ea72530a6ec277

  • SHA512

    ea058753089bcc2ce2d2f5746eaff9199c120ccab97db391b6796a435bdd6d48e188fbea02c462315dbdf1bc6aaca055b4e5f73b0fd1aec24a01366676a74b07

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgyJl:AnBdOOtEvwDpj6zo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_a6e3ffaa8c8bc52bacfc9adaaf0a6bab_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections