General

  • Target

    2024-03-08_8885a999a5e3d8c26e5ca881d5bb2f96_cryptolocker

  • Size

    87KB

  • MD5

    8885a999a5e3d8c26e5ca881d5bb2f96

  • SHA1

    95b581434666bf9678274773027323edeefd40be

  • SHA256

    ce6d802eb767c767a80383518392e234ec8347d95cfaa0aa9657d825b0d2bf00

  • SHA512

    67904cf59f049bdb4c07771a19cd9dde49609c334331723e17bdbee638b632617ae34a95f7520fa2ca3c21f60955bc70f7579da074e6651610acef0cc36378c8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgS6:AnBdOOtEvwDpj6zL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_8885a999a5e3d8c26e5ca881d5bb2f96_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections