General

  • Target

    2024-02-24_c98e04579cebc6a7ddec26963d8762b4_cryptolocker

  • Size

    87KB

  • MD5

    c98e04579cebc6a7ddec26963d8762b4

  • SHA1

    87a42a2fe950dbe4098c34b4e6faba7c2366056d

  • SHA256

    9b18032fbf7d0b0cbb32f6f3a33922959ed62c1a9065ec48ee234304b6d682fb

  • SHA512

    de6c8f2d41fe3a1d50fbd2677b34a318c2192b463b6318e81ea17fbbca0b8d93a1f592548b7112d1b2ab46fd3ab214843cdb8d066c2461f0f0a9b840031711ed

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLO:AnBdOOtEvwDpj6zm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_c98e04579cebc6a7ddec26963d8762b4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections