General

  • Target

    2024-03-28_124f1ed76147d140c7395c9561291880_cryptolocker

  • Size

    36KB

  • MD5

    124f1ed76147d140c7395c9561291880

  • SHA1

    70cfa7031146b4c82d4e09a0afe0b3667addb47c

  • SHA256

    c18fce08dae9049eec01d21d3f8778a68d6f3e66ed7b8956795de3c0ce9401a5

  • SHA512

    6d9f587fb260c5915f592339a36088e126a548c10cc37194acf0b5655e2d985480c84233624a419a08ec7afc5b9e002f37a98365849388c4a3a2d054888daf50

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITP:qDdFJy3QMOtEvwDpjjWMl7TP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_124f1ed76147d140c7395c9561291880_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections