General

  • Target

    2024-02-04_7d648fd8d1f3197902b63bb563f21f03_cryptolocker

  • Size

    85KB

  • MD5

    7d648fd8d1f3197902b63bb563f21f03

  • SHA1

    08fba269d65485769e30cffecc05cac27eeaee61

  • SHA256

    f791d5a07662748a9d7d2dee503d5a64b0ceafc0aa14366dafb4e8461ee70548

  • SHA512

    76450dcb8e5fb49192ce6859f9a124f14ed22a47740c626fd4b82c4bc9eefa00d0aad5603d41cfcfc520fedb580abd0a0d160750fa5ee58d822ba6bc08e9fd26

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJRO:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_7d648fd8d1f3197902b63bb563f21f03_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections