General

  • Target

    2024-03-05_b61535da16f06ac6f4fa6c37dfd77a2f_cryptolocker

  • Size

    127KB

  • MD5

    b61535da16f06ac6f4fa6c37dfd77a2f

  • SHA1

    a64a8be99c85f18774928219c6f44396ce63abc7

  • SHA256

    192b45cd3e861a6b0fa4a1924d931a91118ec903567380b91b687629f60d4bff

  • SHA512

    e1822eaf610ab498419452629ce29bb2672b981a76335af88e3a10998556ea2e2feb641e319a602abf2f68607e2bc3aec895a90902c0a9657eab14d0cbfe1b54

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIc5:AnBdOOtEvwDpj6z9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_b61535da16f06ac6f4fa6c37dfd77a2f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections