General

  • Target

    2024-01-29_8b2fa5f4fce2fb5c4fdb80629fa41288_cryptolocker

  • Size

    127KB

  • MD5

    8b2fa5f4fce2fb5c4fdb80629fa41288

  • SHA1

    307b4b17a4cb14da0456425beaf53cafdb8aeff2

  • SHA256

    283d296cbae88c3de610914d06065955ada645ee86c796ea69d3f7a8fc25a2d0

  • SHA512

    826efadd7e04ff071745df739632147c8a1bdff070ba52a2f4bb1ce23f6c14535ac7d0cdfb09b2fb7d86bc9922daaf3245af9900efa2b16b1b12dc58c8eb8e6c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eJ:AnBdOOtEvwDpj6zT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_8b2fa5f4fce2fb5c4fdb80629fa41288_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections