General

  • Target

    2024-02-12_37266dbb5b4a6bee3bb8ab1d3e03c66d_cryptolocker

  • Size

    86KB

  • MD5

    37266dbb5b4a6bee3bb8ab1d3e03c66d

  • SHA1

    cab34980b2eb167a3e668698ad93e67914ff40fe

  • SHA256

    313d647c1275cff98bcb6fc6ffc3be9fc7f2598594c29425bd332039b22627aa

  • SHA512

    db026258ec554f503f7f35fd6877116ad28104b5ba2c04ae18f95b08bf94d7ffc006776aeb91428e2e5548019482c56b9c0a870709cede68e5f966c97bf7bb50

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJR+2:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-12_37266dbb5b4a6bee3bb8ab1d3e03c66d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections