General

  • Target

    2024-02-18_de675c12e01585766bbff2495fda2fb2_cryptolocker

  • Size

    85KB

  • MD5

    de675c12e01585766bbff2495fda2fb2

  • SHA1

    3285d164778a6cbbb9e22a2befd08e2a0fedb311

  • SHA256

    884166af6df20d2e92ac3415202475c1fbe61048755868dc03b124ca5940adeb

  • SHA512

    d520670068b0ad20e7dc14252516b46e855f92b69824b4f6cdb9b828ce1657601b93d8baa19080aeddb148d3c6294f0e6812392830fd576ad31016807d43c6b0

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgjC:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_de675c12e01585766bbff2495fda2fb2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections