General

  • Target

    2024-03-05_9c0223424e35217b03782306addd808e_cryptolocker

  • Size

    100KB

  • MD5

    9c0223424e35217b03782306addd808e

  • SHA1

    0ddbc853c4d1706595fbe7c367412f0753ba5135

  • SHA256

    b8e32f0d57c23c7d0fb37501ed02e223109530b8ac43d0337cb2a40d125141df

  • SHA512

    da2a4515f05a221700fa54c4e3af450979eda0611a9af883c8b5f7cb3b791abea73e19487e31c20cb037978bba0c411f8f87a91ba923567ff4aece1c17e0196e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBY:AnBdOOtEvwDpj6zH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_9c0223424e35217b03782306addd808e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections