General

  • Target

    2024-01-28_515192c43671d352f50952c7351b4d0d_cryptolocker

  • Size

    86KB

  • MD5

    515192c43671d352f50952c7351b4d0d

  • SHA1

    e120a77de4cbfa9f32f65bbb0ea8323601e5b5fc

  • SHA256

    9ae3489b853506e2144e4819087e1a78cefd28bf8ff59d8e015db651b9e5985b

  • SHA512

    fab3184523fda4d27569bec6d022c78757132b17a2ff3986e90d0a812608a539123e56a173a3f1ed9f6be26b751da50616dc76de79b6a3415729ca7ef3881cd9

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIY:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_515192c43671d352f50952c7351b4d0d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections