General

  • Target

    2024-02-11_d0c993db419d9fcb11581ec242842bb4_cryptolocker

  • Size

    125KB

  • MD5

    d0c993db419d9fcb11581ec242842bb4

  • SHA1

    7ea2b4a924dbeeb01dca3102828ce9f60f57d3c2

  • SHA256

    285a5937e8c0d2bad286bea273704c3b16b5544f71976aca4027b96d9c74a3eb

  • SHA512

    423c3b628fc1eb3564f8fc330ba05f3c9690684d49a2298757a7c096a870e4f0fa3176a350bb7c46c40cef5142e949d9f8ce48e74e61d0c48d31b7d19736fc21

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eE:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-11_d0c993db419d9fcb11581ec242842bb4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections