General

  • Target

    2024-03-12_b501d6ffcbcf843368aaca33b23ffef7_cryptolocker

  • Size

    86KB

  • MD5

    b501d6ffcbcf843368aaca33b23ffef7

  • SHA1

    805faa022d4cc5712f9951a20e9b166e6543e82b

  • SHA256

    d1f657fdf5ced7a75ff16327cbaa29cc55bada337429370d0409b59380acaf8d

  • SHA512

    a911e4f66a6653f7765f15519fb9b4ba1c0bc67ad1e8b9548ebb1ee25418d718789732c19237ff843d0a46750238c3dc630950b02502874f35971ddb135d00d2

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIEkp/:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_b501d6ffcbcf843368aaca33b23ffef7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections