General

  • Target

    2024-02-14_0b008b1daa8fa201de7045dcd3b4c500_cryptolocker

  • Size

    99KB

  • MD5

    0b008b1daa8fa201de7045dcd3b4c500

  • SHA1

    196f7538f8ec12a8f52847cb6f347ab283bd8624

  • SHA256

    19d4b051175e768e7a770c8ac958c57ff05be6540e89fce09d2e7ce59d4a8257

  • SHA512

    67d25c06a1772c7e8fe9c9e6d40e2f1e9cac8377cb7945cadfe28aa0768f1577b1df4c99950b3a2b0576fb98701e3e5ad222fb06c3c220f30ed7683998a90c5e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBx:AnBdOOtEvwDpj6za

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_0b008b1daa8fa201de7045dcd3b4c500_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections