General

  • Target

    2024-03-16_0c6b214a3e4f6941742ba013f57a1232_cryptolocker

  • Size

    94KB

  • MD5

    0c6b214a3e4f6941742ba013f57a1232

  • SHA1

    cf8b9ff77c957929b6bbc6dca2d36847890a8525

  • SHA256

    5f220c0a680edf8da7ab423f05e7b7a1c065d2fc2618d415d44a1ff614590eeb

  • SHA512

    df52a2ed438069674ef2370ea0d1d641a74708119c68b38a44dd0ba8f6212e1cd051b0fce6add4eb0fb58b949e0f24400c5ad138218d901b8080e659b1685341

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpY8v:AnBdOOtEvwDpj6zG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_0c6b214a3e4f6941742ba013f57a1232_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections