General

  • Target

    2024-03-12_0a1991606fd913098c90f8ae0c10799a_cryptolocker

  • Size

    100KB

  • MD5

    0a1991606fd913098c90f8ae0c10799a

  • SHA1

    a19e2b208431fbe3dd249dde4ca9cdc0d90c7da5

  • SHA256

    850cab8ed5daba39d10b0a2b8cb99c0d472edce5735cae66960690d279625d29

  • SHA512

    8929de854abc996d0af90da9601dde4684807f44f129e1e237856ca40a0104c05ff92f5286792367ba3507254e1e8866c3760112ed6a249b135e008c4509ca97

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6iD:AnBdOOtEvwDpj6zq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_0a1991606fd913098c90f8ae0c10799a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections