General

  • Target

    2024-03-11_0fd051bd548b979de0124dc8b589ca4a_cryptolocker

  • Size

    35KB

  • MD5

    0fd051bd548b979de0124dc8b589ca4a

  • SHA1

    ac58c6bcfc1156b2c31993176d1263cc064877a6

  • SHA256

    90af8e05226391d6eba492577df34e59a7fd7ea0f1cb9db795786cc0d548e0e3

  • SHA512

    566dca4bd7fb4642f80252e391998dc9dc91412f7b3fd503c1f926d3599d7df04c718b44acba3e8fc696dda107a1656a2e2286b95ce36f51d3941c2df81f8bc4

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+R:qUmnpomddpMOtEvwDpjjaYaE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_0fd051bd548b979de0124dc8b589ca4a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections