General

  • Target

    2024-03-19_2d6251b429c4a604361e3ea92fbdd54c_cryptolocker

  • Size

    127KB

  • MD5

    2d6251b429c4a604361e3ea92fbdd54c

  • SHA1

    c289483180d013ba3c041420a08ca5f96e393b2c

  • SHA256

    9a4c51e6cbcdf9421301ba4eeb2a24ae388e99c3f4362b6978a4219b37f64442

  • SHA512

    754cb3bdb10cee33ba1e07acc9e467921d0c900d34bb72ad150debd702b9ddd33f030a97c57c139d43620711816a425f99ff8f61b1d63e6984ab8c5bc7f2887b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIToa:AnBdOOtEvwDpj6z4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_2d6251b429c4a604361e3ea92fbdd54c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections