General

  • Target

    2024-03-07_3962023816c8fcd42e69fa2e09c1eed7_cryptolocker

  • Size

    125KB

  • MD5

    3962023816c8fcd42e69fa2e09c1eed7

  • SHA1

    d05c69df76a78e085c7a9117fcb7c0fd19b58df7

  • SHA256

    b9ba44dec1a47c682814319e0d9c2fc0897e5b93a6285cec9894fea39f76cc76

  • SHA512

    0d0de2ffaa60c6ca8d255942ccce63c937957fec2997978920e56412ae5c2c4b9a8baeb5fbcdbaca5ba4f5735e1bcd56339d1b23d588361394c863124b8bf355

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIq:AnBdOOtEvwDpj6zT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_3962023816c8fcd42e69fa2e09c1eed7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections