General

  • Target

    2024-02-13_bd8324a5e42a91d7c38f9a1ab751f092_cryptolocker

  • Size

    87KB

  • MD5

    bd8324a5e42a91d7c38f9a1ab751f092

  • SHA1

    1ccb4e79df7ec17157b29d8b3d5c5ff42000f52c

  • SHA256

    929b41143e3a53abdc7010f266a574e0a8fa922893c817df6ef29dd0f87a11a8

  • SHA512

    eb6986488facd595dcaa161883b13a2aa3340cf3a26bb2a0d8c4a0f9022c86cd564fc5bb8ab5e7bc3349fe70071a82a93435e07417754567699579f478bc866d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgSx:AnBdOOtEvwDpj6zk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_bd8324a5e42a91d7c38f9a1ab751f092_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections