General

  • Target

    2024-02-28_d83467c12c335cd872ef096c8b1ab41d_cryptolocker

  • Size

    35KB

  • MD5

    d83467c12c335cd872ef096c8b1ab41d

  • SHA1

    858bd75e05f1d67be88563225aa24b291f8d55ef

  • SHA256

    1281f4a2d4b15951ab70bce1d2a0dc1d7a3dc0a001b66e64e3803c760682655c

  • SHA512

    267d028e658666a3b4a918a06579a0b41ec6d4185a22ae19b06fe30c28a372a77debf93db70c1a21d382ba28b696d7dfad4582afcfcafe9396ed2b55fa594958

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+Q:qUmnpomddpMOtEvwDpjjaYal

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_d83467c12c335cd872ef096c8b1ab41d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections