General

  • Target

    2024-03-25_5d1858431facdfad5a2da6bc1962da7f_cryptolocker

  • Size

    95KB

  • MD5

    5d1858431facdfad5a2da6bc1962da7f

  • SHA1

    9711019bbedbf76f857e081fc25f5fe0ee38ee95

  • SHA256

    4461f563bf0bc165c4755937e336f8eaf2d1a1191d9fb0bb192c5223cf279b39

  • SHA512

    682977e075138ec546da03d6f2e33b577755527c12d552351a2ea5e547d26d162d20b749f0aed61de8426c39dfddff9d814dd7e9d80c250f2c70a177d5181727

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYIQ:AnBdOOtEvwDpj6zD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_5d1858431facdfad5a2da6bc1962da7f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections