General

  • Target

    2024-03-28_1614c6604535c218e18789e867e78e01_cryptolocker

  • Size

    95KB

  • MD5

    1614c6604535c218e18789e867e78e01

  • SHA1

    637981e20e37a67c04ec71a1d3bc4e4372c716e7

  • SHA256

    2ac989a290a276b224d2b4e2ed919ea10b6af8fcf0fed5fc119e037597a3714d

  • SHA512

    54029c301fbfdcf953b9ac1a68349480abd2276636b08492a30a41fbc1ef297f278da9dcd7609f915e2a69ea368074d11de931e809af1b4b0bedfe8f133e4e58

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYH:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_1614c6604535c218e18789e867e78e01_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections