General

  • Target

    2024-02-03_30241abcaf1909a4abcf3c9bcbd41f05_cryptolocker

  • Size

    125KB

  • MD5

    30241abcaf1909a4abcf3c9bcbd41f05

  • SHA1

    4b54c793e964584f512a0a6e68fde6c8f9db820f

  • SHA256

    7651ccbc96a72d16dc301cf389d658a158c191a36d507f24013edb2d1f538b1c

  • SHA512

    3a7d92385462e2180f38e62130b2d227b68748d9d7d87df3af88d710616187215c02008776887aa6900e16c72de7f61a0292e09b9cfaeb669f644f035e1a1641

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eII:AnBdOOtEvwDpj6zt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-03_30241abcaf1909a4abcf3c9bcbd41f05_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections