General

  • Target

    2024-03-18_1f4f44b0663a8faca16a1d7833034f0d_cryptolocker

  • Size

    88KB

  • MD5

    1f4f44b0663a8faca16a1d7833034f0d

  • SHA1

    02b9a863ed5dd23fc07d0c34f92adcfde49cdbc7

  • SHA256

    9863184bf9731b83ca50554503b0fdd3c16c46b05535d8586a1c9d68a1f50937

  • SHA512

    b612cd6bcdc51a3ee7589816d0e97a16c0e2e8d878cb4e1939c009413cfbcbdf2e1b669679183c9711ab27c95e5d823c76ff91c3da7bcff3e3fedd935418f512

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgSfkrr:AnBdOOtEvwDpj6zT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_1f4f44b0663a8faca16a1d7833034f0d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections