General

  • Target

    2024-03-06_c98fd5b0172c3714e427e7166c89d9ad_cryptolocker

  • Size

    89KB

  • MD5

    c98fd5b0172c3714e427e7166c89d9ad

  • SHA1

    9b0ddd7e949d1e94d761880329c30f38ea2a873e

  • SHA256

    f118732fcfc4ca21bdaad4d70f53a192afcf54887be547e295d4fa18970c01e7

  • SHA512

    80249d96710fec381d28c3b20a6f56d28d42e03440e2c7cb85af9854e85d88432655239f1a0395f4cf44b7aeaddef1a25c8712c26a5bf981f7a769aa99e5e56e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdxQ:AnBdOOtEvwDpj6zg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_c98fd5b0172c3714e427e7166c89d9ad_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections