General

  • Target

    2024-03-19_cd40bdd4fb8e38581b7831830c715de8_cryptolocker

  • Size

    127KB

  • MD5

    cd40bdd4fb8e38581b7831830c715de8

  • SHA1

    0e2c08dacb8be0ac8619dde0c1533abfce6d3327

  • SHA256

    c6cb73903e18d8c398b6844a5659ee86ff8e4133c14c598cde1ca2c25e8fd472

  • SHA512

    abfa36f80fac19e6d199e025fa06e46672a8d0ddfd007c56e7a21d19820a152667a5c41a62a1607a681001f0c24f0634baf4f8d415eb3e199a4790a970ee7cd7

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebc:AnBdOOtEvwDpj6z2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_cd40bdd4fb8e38581b7831830c715de8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections