General

  • Target

    2024-02-03_bf9fdbca7e93c0429e2706f2b202135f_cryptolocker

  • Size

    101KB

  • MD5

    bf9fdbca7e93c0429e2706f2b202135f

  • SHA1

    f5529f0c0ba4af77297afee5ba6c336ce591461e

  • SHA256

    44b540b9cbbd6890aa27c6001200b191348687c1c674413b4586e9c90a8c742d

  • SHA512

    7e72f00cb975d71b353308ad51e6c6c8dbddc1ed70967aaca4682a464295dfb07b4b28a75739101e6cdc443f6de826f3e9f8345c0e33ff24e3c99d6db52ad07c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6ixa:AnBdOOtEvwDpj6zV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-03_bf9fdbca7e93c0429e2706f2b202135f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections