General

  • Target

    2024-03-18_ce77fdbd1e42c2991e55dfb8eeb8108d_cryptolocker

  • Size

    88KB

  • MD5

    ce77fdbd1e42c2991e55dfb8eeb8108d

  • SHA1

    5fcd125014780309ea15e9a30b35f24712a40dd4

  • SHA256

    d5dd1bed2aaecb50dd8795470754d3e2197f4de22f2d0023f3ff7ae93de77d46

  • SHA512

    8e04f6f1104f3f8f87747e1bcb695442701f11a77dbcfcaa9d461d0aefbc49a5a6a69f1ef451ea944e5b1462024011bac153423f551f6f4f6ed6e1b81b2c9d91

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdVTR:AnBdOOtEvwDpj6zzF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_ce77fdbd1e42c2991e55dfb8eeb8108d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections