General

  • Target

    2024-03-07_f1df2f30de32d3fe7afa21e4b38c5556_cryptolocker

  • Size

    33KB

  • MD5

    f1df2f30de32d3fe7afa21e4b38c5556

  • SHA1

    454c9201ea42d694ae2f1b28cc67418523a2381f

  • SHA256

    b6d5d9ec1fbe4a4bf3f04c509e0b71c90289f79314a60aa0915a4d1e22eb753e

  • SHA512

    6c5ce69aa38d55fb237dad11853f21e03ad1f05acc858ead842357e50677afdd8625570e430d98daf389c4efbe0b891d686d17dcaa000b1cd929114069d59d91

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axKT:qUmnpomddpMOtEvwDpjjaYaM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_f1df2f30de32d3fe7afa21e4b38c5556_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections