General

  • Target

    2024-04-06_00f2db560b39406695030b5b5c6cd789_cryptolocker

  • Size

    66KB

  • MD5

    00f2db560b39406695030b5b5c6cd789

  • SHA1

    3fb195e5efa619bc30d5d2bc9f16eb4552da1327

  • SHA256

    f6ef179fd79f87a0e38f99c551c758e6dd0b3fcf6de05d59ed9ef92313cc9a91

  • SHA512

    b354df6d4654ec1de1defcc6bed53e65a3007e66f4b0e6a1052cb2f5e44f775b159358ee1de13a8499742a405d39825017f6034ec9ba22f967c5b6ec2ba83af8

  • SSDEEP

    768:qaVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6WXxiWR:qaJu9cvMOtEvwDpjWYTjipvF2bjW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_00f2db560b39406695030b5b5c6cd789_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections