General

  • Target

    2024-01-28_4ebe08fe90e38a1cb64bb6b36dc8cc5b_cryptolocker

  • Size

    125KB

  • MD5

    4ebe08fe90e38a1cb64bb6b36dc8cc5b

  • SHA1

    b2a7eb1df542f8acc3d143b7c11ca0e5107e9fb2

  • SHA256

    345f1ebe09798b64ed7da25c7514694d5c34f8faab7bed956d45455b28e1cdc8

  • SHA512

    80850684b6bd673385b12e5cb5e89873a4b878afb74bd019a1f821100842cbb1bd129e4470948c636d0463e3061784f8060e7f2fe8a9d3fb51b60bcd636704a0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ei:AnBdOOtEvwDpj6z8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_4ebe08fe90e38a1cb64bb6b36dc8cc5b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections