General

  • Target

    2024-03-08_aa94fb1d9123dcbea5772167ada6a4b1_cryptolocker

  • Size

    127KB

  • MD5

    aa94fb1d9123dcbea5772167ada6a4b1

  • SHA1

    f23a271905b2d0f8109595a39642eaed26b1a157

  • SHA256

    dc1a5f4043d96f21846b62a0c909b84cc6aec288f7230828bdb131d5529105f6

  • SHA512

    ff2022b5cf0d75bab5d525c0287ced94a2dbf2d999c94318b2d217043f1993c7b63adcfca2432a91dcf6f6df7e70af39f5e19b1f2fc1420bb6c15b41ed636425

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIS:AnBdOOtEvwDpj6zz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_aa94fb1d9123dcbea5772167ada6a4b1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections