General

  • Target

    2024-02-04_f63a9ef77eb0c7077dfb28c52505966f_cryptolocker

  • Size

    94KB

  • MD5

    f63a9ef77eb0c7077dfb28c52505966f

  • SHA1

    11c0200872dbab21a1d608721c9ce7e001fe89f1

  • SHA256

    cc245135f5236e9a753e2820509717f98d288f889efb109fe078a2ae8ad819bc

  • SHA512

    08957a4b5eb138c0226ee3590ca857193f93146bffbed8e6b2c8308e5295cddd8b88e2dca25dd727565a7db3616e76580976e4ae946e2f65a5cc4baa277d6a6b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01+:AnBdOOtEvwDpj6zA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_f63a9ef77eb0c7077dfb28c52505966f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections