General

  • Target

    2024-03-06_aa8165cc747751b1b8c5d32cc487c31d_cryptolocker

  • Size

    87KB

  • MD5

    aa8165cc747751b1b8c5d32cc487c31d

  • SHA1

    b13436b1073bf323716f65691f570d1a120e88b9

  • SHA256

    9002886df3cfbb82769fdd004155d92df64f7f57948e76ec3ec70f5b178ca320

  • SHA512

    caf942c6e98331dc68c2d5e51d7d3be5d47a43e7a5969321d6a87829bd3400caad82fd3b8fadc892025aec83cd7a9b3c8f647e972dd045af289ea6f42cf72267

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJ/c:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_aa8165cc747751b1b8c5d32cc487c31d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections