General

  • Target

    2024-03-13_ad9025454a4a7c1345e6c46f6fd3fe90_cryptolocker

  • Size

    100KB

  • MD5

    ad9025454a4a7c1345e6c46f6fd3fe90

  • SHA1

    8da2cdf4fa01447bd6a064aa9dbb9a4d953c52a6

  • SHA256

    161aa22639caadffcfdd78be81afdcecbfb793477bf362dc047e45b65d43634f

  • SHA512

    a6cc26c6ad1700b160513701f080666d850060bbd1f6b5440d64915d26b99694b5c4e6b3b45880a7ff2cc4b090fdb534ab0da52b1abc09c2cae09b216082633f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6P:AnBdOOtEvwDpj6zj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_ad9025454a4a7c1345e6c46f6fd3fe90_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections