General

  • Target

    2024-03-08_c160b2abacc08c8ad444197e4d12d7f6_cryptolocker

  • Size

    86KB

  • MD5

    c160b2abacc08c8ad444197e4d12d7f6

  • SHA1

    95cbffe1e14b58bddf382edb309e38dd54d2187b

  • SHA256

    4cc6589b65bfdf60872742db38a74d024a2bcd9914a9c9d2eb98a406ddd721a7

  • SHA512

    1432c59fed8403d330e7ad2349635be9937ab0e4b389c7830d720875f3ed6a385618431608426b19fecdb665dcc50dc5cfca2d2e77d6eb6dd56d3d1ea4006b7b

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIEe:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_c160b2abacc08c8ad444197e4d12d7f6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections