General

  • Target

    2024-03-11_0732cb455619468ddeea3bab598d25a9_cryptolocker

  • Size

    100KB

  • MD5

    0732cb455619468ddeea3bab598d25a9

  • SHA1

    3306addfbe897485eb3a05a8a25b1f238eaf8fec

  • SHA256

    3d820da6d14ac1bc5b3a384364b8a512b70afda0f32d88dd431584af7b93b813

  • SHA512

    5c5cbaf3cca2b35cf6cc7203084cfbe7a3d487b37b4f068cb4a093d6664c3c8aff56acff69ee4ea9423c77002d30798e6779614738f071918b5f41ec89fb3918

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBz:AnBdOOtEvwDpj6z8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_0732cb455619468ddeea3bab598d25a9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections