General

  • Target

    2024-03-18_bb854fdb292daed1e8c49482c3c13910_cryptolocker

  • Size

    127KB

  • MD5

    bb854fdb292daed1e8c49482c3c13910

  • SHA1

    5de673cfddd987933ff7c3d9e7ca687e7cea8201

  • SHA256

    7ffde40324daf3aab3cc9217808de4fcadff6c6bf25f482129c38b345b8f8a3b

  • SHA512

    c2e9e0369c82e4b083b53f4b632289b6b966b63c4d6c6e81ce05f8177e9a0801f725c3596e6ea7e628c5a9ff5808847d23294ffa9a8c06ae86358f41b49ac6c8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eby:AnBdOOtEvwDpj6zw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_bb854fdb292daed1e8c49482c3c13910_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections