General

  • Target

    2024-02-25_29a51961655c1fd37a1c97ecb858b52b_cryptolocker

  • Size

    87KB

  • MD5

    29a51961655c1fd37a1c97ecb858b52b

  • SHA1

    f412bfd645688f3504fbaf055e3e59efc15ce4ea

  • SHA256

    800c693c99cd5112f6350d917b42f11344c31f95474d5a7b0d086b35291670db

  • SHA512

    2715751cf869a6f6067053a420c8123b06d1ae0d73ae437f05457723e458dae65e8649f76f7fcdf44e5af35c8ae807b232c62de5f0eca3ca9bae76e958d1748b

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISGE:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-25_29a51961655c1fd37a1c97ecb858b52b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections