General

  • Target

    2024-03-14_d63a102aac81523a2c71313b3947cc9e_cryptolocker

  • Size

    88KB

  • MD5

    d63a102aac81523a2c71313b3947cc9e

  • SHA1

    6622fa060be72eb73ac9463479099c78fe18130b

  • SHA256

    9506fac0ed25b391f8a271f92a9856a0864514dc46cec0977b5c2a41d7047091

  • SHA512

    fc4f09edd75c3e236af9040bd94bd6973e82fe351f734755f2be0dae94b4dc1d869f9fe842534801c1e54b12397921c27f3eb4c50db63f3f36c198151e44079d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgSND:AnBdOOtEvwDpj6zqD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_d63a102aac81523a2c71313b3947cc9e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections