General

  • Target

    2024-03-09_6edd842f0775f7cf1c4a6a1630f3d759_cryptolocker

  • Size

    92KB

  • MD5

    6edd842f0775f7cf1c4a6a1630f3d759

  • SHA1

    b8653ea862e6967329e81d75db8e4299fb3a3bd7

  • SHA256

    a173db9cf3417a4f589beba265e1a0a4d7d9459ad22dcdacfb28eb709eae6ad7

  • SHA512

    18cea1047bac9cc469aa5f83acc0f4287604947aca3343f93e4cabc1c06dc08459e4465d95b3ccdc3fcfe785e585598eb1013584ec98552cb87f78f7855f9041

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+4B:AnBdOOtEvwDpj6zt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_6edd842f0775f7cf1c4a6a1630f3d759_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections