General

  • Target

    2024-03-25_4e16729175bce9ac9668edbca4fccc2d_cryptolocker

  • Size

    86KB

  • MD5

    4e16729175bce9ac9668edbca4fccc2d

  • SHA1

    f050f45d8ff246a24e723e8af174c8bc13c74b69

  • SHA256

    691904e5862b500146985660695d0cc6de89c9b8865adc06cd4e631f18d79497

  • SHA512

    8424cbdf8d17ee51454f250ac0239fa3721dcf17ca273e246b3713fc8cf65b340d8c661f499b6e6372d56479a95f65c0a26380d8ee6ced29d20c53bd3a26c5e7

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJYGn:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_4e16729175bce9ac9668edbca4fccc2d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections