General

  • Target

    2024-03-15_bb1a83e85b24114c3efff190bcaca3a9_cryptolocker

  • Size

    87KB

  • MD5

    bb1a83e85b24114c3efff190bcaca3a9

  • SHA1

    f2814579b8499d9c37c03695e9b84e698e7521f4

  • SHA256

    1c38f0965abba173bedaa4f32527f44fd27657e40982fe6726380cea2d8095cf

  • SHA512

    ff5f1f74464a0c9756125c474e1c9d5c126b94547eeabb4388992a433bf6c025676efd9daf0f712a74eb039baf079d56357bb4915fd60eae9e0cd00cdb20bf4b

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIOzM78Y3:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_bb1a83e85b24114c3efff190bcaca3a9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections