General

  • Target

    2024-02-03_61490201bf2fb3516644b8f58634e713_cryptolocker

  • Size

    100KB

  • MD5

    61490201bf2fb3516644b8f58634e713

  • SHA1

    fe660fcd7f5283ef60553497b4451335dabda465

  • SHA256

    211b65a5089ff36e3ad0e2de7f9566ad9779682f572c4c1fef33df73111b0c9c

  • SHA512

    4e15b6557c0805770eebaa5b4389fe038cdbf56aff8e43dac86ff4b844a3ecc16ac9aaa031645c86c9d80878e1bfada511171ae58538f6bc54f6c46bf515eda8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6O:AnBdOOtEvwDpj6z6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-03_61490201bf2fb3516644b8f58634e713_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections