General

  • Target

    2024-02-23_c86209e650de4fd5a3c38b7386d5ccff_cryptolocker

  • Size

    88KB

  • MD5

    c86209e650de4fd5a3c38b7386d5ccff

  • SHA1

    ef5a0169e066eed1c3e5aafb0c341bae9b445a7d

  • SHA256

    2833b8d3b8eb040f00407b7bdd1edb15e43cd1c1b05586d7e5c476687a1b20e9

  • SHA512

    97440c83eec73a939e4d9034d25b5e2bc80eeb9c14bf29eded75098274f8bddea9cdb7dea54e87bfa4d9d25f6f0195bdf0089ba78571c7d07dafdd56789c137a

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7dU8:AnBdOOtEvwDpj6zF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_c86209e650de4fd5a3c38b7386d5ccff_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections