General

  • Target

    2024-03-18_52fe04499c7cbf9f1d338dd3011f2dde_cryptolocker

  • Size

    126KB

  • MD5

    52fe04499c7cbf9f1d338dd3011f2dde

  • SHA1

    fb8b71c96180db17bed34088184108591cbef1d3

  • SHA256

    cef075f1ba619d611dcb2fd85e650dccb0d4b7e07b7293f1c0e607a0048a3ef1

  • SHA512

    231a5407ea96e4b4679b634e30f5a2a8eb0f1e79c295fcfad4f70681fb8c0196105273acf3483f807fa02338971c8277d79a04ce9c33c7a2c80efecb921dc430

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIf:AnBdOOtEvwDpj6zO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_52fe04499c7cbf9f1d338dd3011f2dde_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections