General

  • Target

    2024-03-16_59d365748e057b376623e8b35578d79f_cryptolocker

  • Size

    100KB

  • MD5

    59d365748e057b376623e8b35578d79f

  • SHA1

    2a62f56fe62b6737533d426e013c66e3d363b4f9

  • SHA256

    8d76f6d24fd9c19a5904922b73cfe097e1d42005ec8178f77257e4906396d81b

  • SHA512

    7ed38f95c9d632ff3ef8bdd9532d9856ac50ad99b9512d9a0558fe54d05b813017d05969847a6d59500299e668c2c1c9e73810e50c72dcec5fc907b0e992b3d4

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBn:AnBdOOtEvwDpj6z4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_59d365748e057b376623e8b35578d79f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections