General

  • Target

    2024-03-07_627514efbff518af895a98262be3eba4_cryptolocker

  • Size

    88KB

  • MD5

    627514efbff518af895a98262be3eba4

  • SHA1

    041a5bf1c4fee468bc03b647c54db78a7a928166

  • SHA256

    ab3360754473d3053dc50858f164f5bbe38768f10530e9a039aa0d132ec15fd7

  • SHA512

    5427f51f8f8eeb6d893f764a766b086dd512d611a9cc9678abe3c14d81849601047f6bd9241c8ad38a3317d1342344c7e45238ff453e183eea631eb32f0002b4

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJY/A:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_627514efbff518af895a98262be3eba4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections