General

  • Target

    2024-03-28_6cbe06fc313c3bbce6c7e6e8e310d174_cryptolocker

  • Size

    50KB

  • MD5

    6cbe06fc313c3bbce6c7e6e8e310d174

  • SHA1

    411d4bf6bce4a511de6cc7e256e43750d3ab735c

  • SHA256

    fa4e4086b8ba1743630b88ddc19b09e1d6a96926592df98aef63ad5d395ec1ad

  • SHA512

    153e03523fed7f77565bca918abe2479bf7fdb4e2e597d6bf934f57225721850a64fcb2f7f5440f3e570d416670fbbba5f29869bfc20e1e49b8a01a86abaeb2a

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWLG:m4Q2ckzIOtEvwDpj4HYW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_6cbe06fc313c3bbce6c7e6e8e310d174_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections