General

  • Target

    2024-02-19_a1509688329eea1555d3deace89f390a_cryptolocker

  • Size

    125KB

  • MD5

    a1509688329eea1555d3deace89f390a

  • SHA1

    3e48d51d117dc9a0872fbc16460bd9ef55a0931e

  • SHA256

    ff0ea4a91c57ad11a7daebc9f9c7f6e5f386ecbf1731336d4db2fe7e898d3a6e

  • SHA512

    442ae28401677998c8b85fb961ad85439f38240f0cdcff75cf8a2e9332a9524a823a2d34f12f52a73c0f2ab101d9419d315acb3101618931b62a31cfcfd85d21

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebu:AnBdOOtEvwDpj6zE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_a1509688329eea1555d3deace89f390a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections