General

  • Target

    2024-03-25_cbe4f18be63cbb1a61890ef7e7933c74_cryptolocker

  • Size

    94KB

  • MD5

    cbe4f18be63cbb1a61890ef7e7933c74

  • SHA1

    d7bd675ce1648ef20385efd392b0f61f1659ffa5

  • SHA256

    84b4929219b29ab250f98cfb29f7c7449f59d5f2a2d9c7d7b732d6381f8bb4c8

  • SHA512

    36266ab738fad8bccd6b7ecd2cdab757331de805f41cd1f7815f8424ecf382ecc142a5a6ad020be606fe6d2e1348f695584cc43b9048807d3b2e9caa18854038

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYIV:AnBdOOtEvwDpj6zi

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_cbe4f18be63cbb1a61890ef7e7933c74_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections