General

  • Target

    2024-02-04_dba207dfe4e64b2c8d19e9f38284768c_cryptolocker

  • Size

    87KB

  • MD5

    dba207dfe4e64b2c8d19e9f38284768c

  • SHA1

    9e7a8779955a36835f518e6ebc4a55dbc7b07885

  • SHA256

    c254235a84387b346e5250ce29fa80b00edce2e845176d756c5e20d0f12bfbff

  • SHA512

    c74abd27d466dcd9160a519c79c57f8a9735acff7ed57e8c378593bd10f1f3ee89bb5b3ad3cf3e10bd03419daba65f77ea72ceb70ebb5703ad8110781ada1767

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLS:AnBdOOtEvwDpj6za

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_dba207dfe4e64b2c8d19e9f38284768c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections