General

  • Target

    2024-03-08_b1f5ab9bd54f44e5f4d969bcbab536a0_cryptolocker

  • Size

    127KB

  • MD5

    b1f5ab9bd54f44e5f4d969bcbab536a0

  • SHA1

    1c78107303dfc48fbaabd86502741a813d0e8828

  • SHA256

    ffa8f217b854d06487b81b55467b694cf2be2c6f292f9037884ae19b55d5f37b

  • SHA512

    21a30c7de15cda53219ad1284faaa1c764abeef87e72e3ef8c8021abd5fe0878b621d3ee7f17bf9ed7246c553bb508669d905a14a8869a446758f3c732780126

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIf:AnBdOOtEvwDpj6zu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_b1f5ab9bd54f44e5f4d969bcbab536a0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections