General

  • Target

    2024-03-29_1a8a400552e8911643f87edf15a1928d_cryptolocker

  • Size

    130KB

  • MD5

    1a8a400552e8911643f87edf15a1928d

  • SHA1

    2a034fdb0e76ba7cb42d216af3f100106304b72d

  • SHA256

    c4e89e7c5a93ce5e94f5c8c1d2cea860c139b0fafebf3f75418c9dc9e99d8cc7

  • SHA512

    83989580446ac4738b5afe70a0e2ea8d952fb8e490c2c4f97fbe7a408a0191c6dc4e6094cc34686680475560a0f7eab7de277d98a5438d6664a36073d5f2de39

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eexy:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_1a8a400552e8911643f87edf15a1928d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections