General

  • Target

    2024-03-29_f64f676757ebed88d9dc3a4be3e326c0_cryptolocker

  • Size

    87KB

  • MD5

    f64f676757ebed88d9dc3a4be3e326c0

  • SHA1

    afadfb1946dfcf6345e9688e5271f893a3486d91

  • SHA256

    10bcac58e8c433dd5ab3c028b223ee81a04a1257f446659fec0db51e806006b2

  • SHA512

    85b7b632f79b6ccb7e2e42f003833dad09cfd284896411f92f8ae936f77425e1ed082256df86bc4a79f42c3c22049419bfc8c4459ed7c256fa2eaedf85391b62

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg59:AnBdOOtEvwDpj6zn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-29_f64f676757ebed88d9dc3a4be3e326c0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections