General

  • Target

    2024-03-08_a16789eb340d07ead572fdee3c27d52d_cryptolocker

  • Size

    86KB

  • MD5

    a16789eb340d07ead572fdee3c27d52d

  • SHA1

    bd55dc117badb45b65a4aed5940008e58e6936e0

  • SHA256

    a5dbcaa5bc2d57a55614264cda556db97390c5a308c804d9ad983a215d56eae2

  • SHA512

    dd9aa52298a25fd72fd7f69335aec2cc4680a17e4c5371884d65ed910a9f83105f9a160676eb3f325b4f8057a3b1a6e7432f78546c4a3d531b06e55c4747dd95

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIR:AnBdOOtEvwDpj6zY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_a16789eb340d07ead572fdee3c27d52d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections