General

  • Target

    2024-02-17_b6f4644ba7d8e7eb5864a0b713f5780d_cryptolocker

  • Size

    126KB

  • MD5

    b6f4644ba7d8e7eb5864a0b713f5780d

  • SHA1

    8cbad40a0ddd6d3582fecae038ed40a9c1118a4a

  • SHA256

    e23293be1ea17124d1fe738a66407aad765aee7485c0dab984b563a7c5729706

  • SHA512

    bad8a584cab52b8e0370b446ab523481aef804aea6c56ac3d65bd1c19bbd08578898787d69931d2cdbe400093c74a16d5f17b5378f410b1d61f85cc210622948

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEQ:AnBdOOtEvwDpj6zK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_b6f4644ba7d8e7eb5864a0b713f5780d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections