General

  • Target

    2024-03-07_5ffdf1f6139ba3a2dff46d0160d18076_cryptolocker

  • Size

    88KB

  • MD5

    5ffdf1f6139ba3a2dff46d0160d18076

  • SHA1

    3be402b841fdc34732b0f4ec9e87ec99255f2ce0

  • SHA256

    2b976c3fa9f75b9318d2e813984488aa60157c9325b57080709e3f599b4fda3f

  • SHA512

    296028b6c5f6852180060bb10b8b5ee2f3837b7c195d20c740c5917bd3ab81513a741d909c91077fa75fc3e16bad059a59a13737c80f690ab00ec019b5f20fa1

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgSXCe:AnBdOOtEvwDpj6zi

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_5ffdf1f6139ba3a2dff46d0160d18076_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections