General

  • Target

    2024-02-04_f516c477f0311097cbd468e9b45d3206_cryptolocker

  • Size

    86KB

  • MD5

    f516c477f0311097cbd468e9b45d3206

  • SHA1

    0479dfb5c827e315427305aa353e72c568a13a9c

  • SHA256

    70d4c8e11abe5478ef65576561e829a8a4d7123b158bc15f23860bf563d77b94

  • SHA512

    42fb8be6167ea8c0762a6479ab915d2852902860b6e677c536628a6ba0c42f227ff16a86978df364a3c54752e797865451c8daf0bcb14289076cc7f1ea954144

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJRx:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_f516c477f0311097cbd468e9b45d3206_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections