General

  • Target

    2024-03-15_a8bd18a4a60d5dbb975712cb8849eb64_cryptolocker

  • Size

    87KB

  • MD5

    a8bd18a4a60d5dbb975712cb8849eb64

  • SHA1

    a5764fe84bc40bba6690fa4423a9782290d2e650

  • SHA256

    81d15b11a723d2db200c31524eda3f7ad868c86cde66d5fb78f152348a5a59be

  • SHA512

    cf157f32eb520a5bbe422cdb237947cab759710c0b325c2713ac23c0fa4b742650d37869ee19adaacd21874904ff587233a79d82c1f3b731d1cded60c5d3fcaf

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISEx:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_a8bd18a4a60d5dbb975712cb8849eb64_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections