General

  • Target

    2024-02-17_be1910e455636a4c9b93113384f09652_cryptolocker

  • Size

    95KB

  • MD5

    be1910e455636a4c9b93113384f09652

  • SHA1

    22755f4e64d9e7f785b8fe6f868ea0f65e51c229

  • SHA256

    8581aea12c54466b7d94dc1cecdb7903f1c472705c5f4882f4581206338e9bbc

  • SHA512

    9788244115defd36997ecf8b912b05dcbe9a09ad88fcaf25e777e432433bf204fd0f64029762801848d5c45eaf1ce1c24ea5398e0e5d55b22a4ff32b7f604a0c

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp016:AnBdOOtEvwDpj6zs

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_be1910e455636a4c9b93113384f09652_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections