General

  • Target

    2024-03-16_a0d9cd4b16240b4477a069fe3bae13b2_cryptolocker

  • Size

    101KB

  • MD5

    a0d9cd4b16240b4477a069fe3bae13b2

  • SHA1

    11e95029f128ab19b5fbb220ddaf48beb939ce3a

  • SHA256

    cd0bae3cc18e5214b06d6573648c8035a05333ed8e800cf4af8652b18e56d82b

  • SHA512

    c6b700adeab1f08bed0ed47a1bfe579f89e924d1284b2203cbd6d77e0b85279c532ff70cc1801e93a452dc8bdcfe99935387d2c8de989528ee694b270590a749

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBCP:AnBdOOtEvwDpj6zx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_a0d9cd4b16240b4477a069fe3bae13b2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections