General

  • Target

    2024-02-04_328b59ca969439d41a8d77e006797016_cryptolocker

  • Size

    125KB

  • MD5

    328b59ca969439d41a8d77e006797016

  • SHA1

    1d1bc2052638cb00d3fbaa6e340f28b2372b3500

  • SHA256

    f3a22a30872fa7844ab8cdeb7507aef003b9fa07968152909f452473a3351263

  • SHA512

    f362bfdb22803a7372312f1f62c423c6d54be852a9c46f9f8828d8966f3f2d58ef691dcc922327420781f13fa585e3b2961904fcb2a3441236078e02b3f3d6e5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIp:AnBdOOtEvwDpj6zU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_328b59ca969439d41a8d77e006797016_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections