General

  • Target

    2024-02-24_289fa7d47bb6f45681bb803016055be3_cryptolocker

  • Size

    100KB

  • MD5

    289fa7d47bb6f45681bb803016055be3

  • SHA1

    b8c50ed44c3691a35e43b497c2418e923021339f

  • SHA256

    599ececb46b7828e7c034b01f229d4b9268ee7e5774b84a79e2154eb384f641a

  • SHA512

    d00616cb20b2150995a1018e278562295cdde8e3496019414b93741a38a22773bde59e6b83ebdd382d9113335aee2ce92dfc82a50dc86811031226c6c7704ece

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBC1:AnBdOOtEvwDpj6zb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_289fa7d47bb6f45681bb803016055be3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections