General

  • Target

    2024-03-12_d1dd0d70da09cf231a302e812e1694f6_cryptolocker

  • Size

    89KB

  • MD5

    d1dd0d70da09cf231a302e812e1694f6

  • SHA1

    d0c228e262a19c96dc2d0e6c9ecc0e6a116078a0

  • SHA256

    7d07e50e7095a44c26119cc3718856fa9a246ef4d4aa71bb952d6d072580346d

  • SHA512

    2421cf47780587ff530a910f3435e9bd18031c3f26c2217cfb477841453eb36aa459c6908c1983c8cb82c0ba89b0fa8b00d48514ee2921d738f836ce4d25bf79

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdPY:AnBdOOtEvwDpj6zC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_d1dd0d70da09cf231a302e812e1694f6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections