General

  • Target

    2024-01-28_fd688495501dbcdec0ef82180e8ca54d_cryptolocker

  • Size

    90KB

  • MD5

    fd688495501dbcdec0ef82180e8ca54d

  • SHA1

    2006aa5e0a97a11bf3ca2195c321bc7dc882dde1

  • SHA256

    b25b59ebd3b6a266d13dee103753e1049f53502e074304b10a30a1cf0c211444

  • SHA512

    9fe5651ca49ebb379c37d4325154035d816909492ed7e12a31e785d23b6d445874ae41d5d530bd1887af2d3f6a281c285d8926acb26d44eede34673e4eeb230d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpB:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_fd688495501dbcdec0ef82180e8ca54d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections