General

  • Target

    2024-03-18_2ea6c5234be40bd642afb1183d7497fa_cryptolocker

  • Size

    127KB

  • MD5

    2ea6c5234be40bd642afb1183d7497fa

  • SHA1

    a2f8d4202e32029f739e9c7d296e244bbbefbc89

  • SHA256

    118d0f9f96db64285cc4bfce6b041c2d50efe16c4bf643a2b112c661d9c5d190

  • SHA512

    14fa5603b179f30575c0fc4402efb54c84eec2589ec9fea276ad7f095c6c10a554c0ec92d124f4fbc74c7d0dbc2483b2b6162366597d665637221b4c409bc6fd

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEoA:AnBdOOtEvwDpj6zL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_2ea6c5234be40bd642afb1183d7497fa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections