General

  • Target

    2024-03-29_01bb0e22ada23acd462ad3393ebbabdf_cryptolocker

  • Size

    50KB

  • MD5

    01bb0e22ada23acd462ad3393ebbabdf

  • SHA1

    6248749a570ad3865627d49e4a8bae9de109547e

  • SHA256

    a262fa7137f55829bb65057fdfa0bcbd91e5f3c40ea136b4432d2541d97ef6f2

  • SHA512

    1784c486f08e67a15b2aad4c57055927acbef5354d1d11848212ecc8a83499afeee87579c49070ca60b62ccd0c74914cf23aa41220eb87127986e50c928df224

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWLQI:m4Q2ckzIOtEvwDpj4HYv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_01bb0e22ada23acd462ad3393ebbabdf_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections