General

  • Target

    2024-01-28_ba2dc7bad60ee26ee536a45c8c05a82a_cryptolocker

  • Size

    84KB

  • MD5

    ba2dc7bad60ee26ee536a45c8c05a82a

  • SHA1

    6f496b3b2c0bf703a827ab555ac551046439419b

  • SHA256

    b5ba036658a4c560268b84533698be8ca7c4b59ef62c787472d0c9d9be9e7c2f

  • SHA512

    1043cba78f0a0c73392d97d6ea5013d424d4a375f1491af3e2a44b9180981c4e2c39062d9ee39ed7f55e88b72eb69bfb12eaee6e61ead8091027748637279c1c

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtI1:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_ba2dc7bad60ee26ee536a45c8c05a82a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections