General

  • Target

    2024-03-12_db0c2c45a29afe04512be75e70faa1bc_cryptolocker

  • Size

    86KB

  • MD5

    db0c2c45a29afe04512be75e70faa1bc

  • SHA1

    7bbd61e331de8b31426a039eef6aadb0908db8c2

  • SHA256

    f571e7f4f5c4868f60620f032f397122fa3990d1b464a8b5f610904cfb06e3c9

  • SHA512

    62b40b015a3ba08563cc6ac942ab8833044fe25a46da52f2fd7f5016f973b95e47a959733a83d54c826639920f4127dc48b270de581a26bb74cdf655e90e8443

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIEkK:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_db0c2c45a29afe04512be75e70faa1bc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections