General

  • Target

    2024-03-13_ba0befd5034883a069b150c13e84abc3_cryptolocker

  • Size

    101KB

  • MD5

    ba0befd5034883a069b150c13e84abc3

  • SHA1

    76ece12f83bba1fe7d3b9fe33de8ae67f037bc54

  • SHA256

    13ff933f6479d9b8dd42cb30c47be339d9723a8492a3b41f271b7da69e6e8959

  • SHA512

    0dfe6cd468920e4ad3babbb336ab2d8705820513f7ce81f6c9aac5f9871039d0da17e2cb6cfaf57e31df0e99f5a401b1595e119c73e387b68e4f05dc0c081825

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6rQ:AnBdOOtEvwDpj6zI

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_ba0befd5034883a069b150c13e84abc3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections