General

  • Target

    2024-03-27_fc9b49ad98665172a5dcd5c4d25eb126_cryptolocker

  • Size

    100KB

  • MD5

    fc9b49ad98665172a5dcd5c4d25eb126

  • SHA1

    8c532ec30a283b5f6e2adafdc37170bc6fd920dc

  • SHA256

    b2eb6dac521346d9a5e1199194942225b8bd4aec7d1823e9dfc2707b7ca1de4a

  • SHA512

    23509b34379e684b57583de058c68f3f3d83076ac3266f65433397d09b1f749c551f21531bab2e40974fc03f47f7bb2a5770d46c295b36130a7f656f6db522cb

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPy1X:AnBdOOtEvwDpj6za

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_fc9b49ad98665172a5dcd5c4d25eb126_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections