General

  • Target

    2024-03-07_f95d289fe76f4b4ab37cd30daa7c1e94_cryptolocker

  • Size

    34KB

  • MD5

    f95d289fe76f4b4ab37cd30daa7c1e94

  • SHA1

    407b289d5c5e3aa5351ba010c4063d9c6998c8ba

  • SHA256

    ee81331e81a6e888805e7719c83dc92d2fd04796c5a5777895af1a8c12b580ee

  • SHA512

    480d9e58d23c47cfed8b618583ab25adcf1450e99f1f9ef70f7d520622d665fd5d0353ff4a032d8f28e43a9e293435bc804f5ee523812c197fd854bb04ab0544

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax6n:qUmnpomddpMOtEvwDpjjaYaC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_f95d289fe76f4b4ab37cd30daa7c1e94_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections