General

  • Target

    2024-03-12_8fff09aa2c1f88f41f2c55d7c332443b_cryptolocker

  • Size

    86KB

  • MD5

    8fff09aa2c1f88f41f2c55d7c332443b

  • SHA1

    4f26300f9726a6bf3fc512b290681ed89da22f82

  • SHA256

    f5e4aedf80ea8a43e5511349e1901af1238a85fd155281a59b44876baae00b73

  • SHA512

    e45cb0b137d5388e21a1df07d781d816fafbfe375da41b838d984f1d5cdc0cc94346ba146a92b995903006c387e941eac742154efe317a19db04b02bb47c4901

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgj3:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_8fff09aa2c1f88f41f2c55d7c332443b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections