General

  • Target

    2024-03-11_59681382ec3328b3a4ffd8fbd807b9df_cryptolocker

  • Size

    99KB

  • MD5

    59681382ec3328b3a4ffd8fbd807b9df

  • SHA1

    b132775998044ebdbd3734a6bd10c68b72cb40e0

  • SHA256

    8367cc8d9fcd26f560a15d9f25f90edfec37c835b621f7383d27ddde7cd4bfd5

  • SHA512

    f888f9ff3decf0918b6bcb9f975fc75b43ad9df7115d6a8988c3cae2e7e746f3c036340bb72bc1fabddc1f53079487187efdda5b77bb52751989cb3b8042b8d9

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPy9:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_59681382ec3328b3a4ffd8fbd807b9df_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections