General

  • Target

    2024-02-22_fcff8f5e6ef206a81095eba10498d7a7_cryptolocker

  • Size

    87KB

  • MD5

    fcff8f5e6ef206a81095eba10498d7a7

  • SHA1

    690d48d6f839a3a827ece314571eddb21b363694

  • SHA256

    be41fdafc5bc1f8267ff0a596fca546fd9112b27c1d72a30323c9b60b3aad57c

  • SHA512

    15486fe1165789e2b522efe57f423f0a0e1cf0414d8b732e72294ac750e14f02ced68e5bb35bd65d6529af9792c6ef6011e96251fd522b52e3ad92081740ba3b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgS9:AnBdOOtEvwDpj6zo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_fcff8f5e6ef206a81095eba10498d7a7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections