General

  • Target

    2024-02-28_bd8229f8e1f2bf0efb34dcf07f972df1_cryptolocker

  • Size

    129KB

  • MD5

    bd8229f8e1f2bf0efb34dcf07f972df1

  • SHA1

    5f8da181f329131532bbf674977b036dcfcc9de2

  • SHA256

    959aaf0d82298fb3d06c10732e58fca32b3f95e50759e6ac3024051c095cdfe5

  • SHA512

    fb875ecc68d191a70c6b29bbdafc5aa8127a86d823b74ccb78aae157127eebfff764b4b3ebc37c4f0ff0a2d87054baa8ce25f4ef79d09cd524ce83703593c4b6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ee5:AnBdOOtEvwDpj6zY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_bd8229f8e1f2bf0efb34dcf07f972df1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections