General

  • Target

    2024-03-08_b26e2560d028e18279d012f44c9b44c8_cryptolocker

  • Size

    127KB

  • MD5

    b26e2560d028e18279d012f44c9b44c8

  • SHA1

    5fac947b2d2fc881de16f6d44000be8ea23cc26d

  • SHA256

    5885f20a33b2d70fcacb12f21b188f1e833500fafe590e3e16d1ec83bfa1f14f

  • SHA512

    bcb2403206ca0cf8def30f5ec01d24cf9a0ec1a64d03ef2de97dccf90eac27aa034706594c3c1f4bf0e9cfe9d812861bae868e6edaf10d96d7e1e0261dc7ad4f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIO:AnBdOOtEvwDpj6z/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_b26e2560d028e18279d012f44c9b44c8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections