General

  • Target

    2024-02-18_ac69c7acc8be524792db77efe4fdfc9b_cryptolocker

  • Size

    127KB

  • MD5

    ac69c7acc8be524792db77efe4fdfc9b

  • SHA1

    ea789a5d69884a21966ec4e6720785b035fd3b67

  • SHA256

    f674de38d5b5b01df58c180271c4695fe98c5964d02f592c09c3d2ebb6ae4a41

  • SHA512

    f4a2c610bcd18914014b492e459167ccfbe04759132c23382f23f8378cda946a1558c2a2386ac40fcbe1a98125e3a0fe92877c63611bee6ccd62e92d480f3574

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1emb:AnBdOOtEvwDpj6zu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_ac69c7acc8be524792db77efe4fdfc9b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections