General

  • Target

    2024-03-18_f978da40aefb669b87308cf65d32cfc3_cryptolocker

  • Size

    86KB

  • MD5

    f978da40aefb669b87308cf65d32cfc3

  • SHA1

    e6044a2394b51821a2d109f31ff6fe85a40f4e1f

  • SHA256

    14bf3e7541c4c8fe8d3f14bf5f2e762da4d692c14d4b6af2ae4c846bfe12bea2

  • SHA512

    aaf9e1d858d7a8cd24bee1eca13dd6e60429b9456d3535d1f5b5706a4ec8351a4ebb92bffe63d8d292e2265bbf29d4e4c45fa89e2650f81f255fca08870c9c97

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgux:AnBdOOtEvwDpj6zA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_f978da40aefb669b87308cf65d32cfc3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections