General

  • Target

    2024-03-08_4032541cb878c49c2eea05f95ff2be69_cryptolocker

  • Size

    87KB

  • MD5

    4032541cb878c49c2eea05f95ff2be69

  • SHA1

    7cc67a8e9860bfb549b2f1ffd25f01848dcfd026

  • SHA256

    a945dc82c37ebac5aa5f25d41fdef7f6bd417f8bfa03d4ad1f4262cdb4e48a01

  • SHA512

    84236aeb7088de2cf7d021145cbb4609e545f3815151022fe2c023718d145a388388842e5d70bfce7fa4c6ec8a575a1a762cee2cdc1ae0f4cf969628c4a76d2d

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJY/K:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_4032541cb878c49c2eea05f95ff2be69_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections