General

  • Target

    2024-02-24_71dcc29cc03797e54232f4b30264a189_cryptolocker

  • Size

    100KB

  • MD5

    71dcc29cc03797e54232f4b30264a189

  • SHA1

    7a6538c1b1cb26d785f34b4d033ddb69aee29f9a

  • SHA256

    232cff262aa2bf1d3b9ea1e154ff010a061dccf50ea39b5c283db8f2f6a6930e

  • SHA512

    d715569b011742290952cfe2685e028c9e1e8c1a14e8e6249ef4c16f740bf821622db17f856809bdc4cb01b3c5785ca9b578c9b2f692cf2ba6e5db108e0765fc

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBCw:AnBdOOtEvwDpj6z6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_71dcc29cc03797e54232f4b30264a189_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections