General

  • Target

    2024-03-15_ff8035c1dd629a23bc930db737f3f517_cryptolocker

  • Size

    128KB

  • MD5

    ff8035c1dd629a23bc930db737f3f517

  • SHA1

    5d2236bfe8fcd140ceda919299619f19a6e125dd

  • SHA256

    cc0934990707a1d8ebd14d88e5a917517905a66015ac584a1ace6ad167c20cd9

  • SHA512

    31b87f413c0465a0fbf20dfcd042bfd379418ccbc2e5dbc2ce3c9b6ef0e886975ff53266513b8f7a9a97240c05c62a28d8995aa6409d00df3e4c2b63475ff2ab

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIwi:AnBdOOtEvwDpj6zk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_ff8035c1dd629a23bc930db737f3f517_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections