General

  • Target

    2024-03-07_416e794d5a370992e76e8602752b0d5d_cryptolocker

  • Size

    126KB

  • MD5

    416e794d5a370992e76e8602752b0d5d

  • SHA1

    0587604fa1977482f60603749b0d3ade2357092e

  • SHA256

    834d4a72068b84c1e2c90047294dc83e74508ffd81079a519622935855850b6b

  • SHA512

    2caeec9da7f9fb8aed4d98349148f9571203c25efb8ed60b5458df4829f394bb6349c0f5468415ba5ab38d8abb53b0c94814e619ba5e278096fe2526a9139ccf

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebR:AnBdOOtEvwDpj6zH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_416e794d5a370992e76e8602752b0d5d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections