General

  • Target

    2024-02-19_fabdc3bcfa3b9d86b4b994b622926717_cryptolocker

  • Size

    85KB

  • MD5

    fabdc3bcfa3b9d86b4b994b622926717

  • SHA1

    4bd8cb00012b555758c12327aa374579290ea81c

  • SHA256

    d0544fa903077e9aa573357967a5a8933802ff2ed9678abe83e7536756cc9a6e

  • SHA512

    a84ae0911668b8206142e493f46a8dfaa6b9c0bdc2d195e9bd2b7f4ae01a4adc0d9b846cc93a5a38483a5217a849d25b3ffa208a6c95398c5b2da391bf613c3c

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgjj:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_fabdc3bcfa3b9d86b4b994b622926717_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections