General

  • Target

    2024-02-13_564678290d4d5287654feeb46916e0d7_cryptolocker

  • Size

    99KB

  • MD5

    564678290d4d5287654feeb46916e0d7

  • SHA1

    ffa52981d8871d043e0ace1f8c81e9a65ef43da2

  • SHA256

    fa9ae7910d32e86649a9ac4a04bde5b9d222c62176be106ad5a691b226dc643f

  • SHA512

    573d19dceffd60759d9a39fc487765b7256a5bdca277c1286d87fcd8af7b06c285f2fe6b29c0c4e93d82b0879db300b0ece7c0403e505daad667cce1fac5f45c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPef:AnBdOOtEvwDpj6zC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_564678290d4d5287654feeb46916e0d7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections