General

  • Target

    2024-03-13_341ee8b884034eb899aa2f433602b245_cryptolocker

  • Size

    35KB

  • MD5

    341ee8b884034eb899aa2f433602b245

  • SHA1

    1727047f783e27a127532035d6d6798a0b284034

  • SHA256

    fa01afb29bc23022cf7041890871ef4acb94736f0b66d1e8b43ce2638b7f3522

  • SHA512

    9dd9173309384ecc19d34bc98a68d9ca27274121ffd6af12a32d8e7e3790231608413a92cd595f14a176bd5ae7830d44e264a06831fc963d2d5c5354fcd50c74

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/Dpkn:qDdFJy3QMOtEvwDpjjWMlU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_341ee8b884034eb899aa2f433602b245_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections