General

  • Target

    2024-04-09_6b6577ab09ac63517c63250ed5eba4f5_cryptolocker

  • Size

    100KB

  • MD5

    6b6577ab09ac63517c63250ed5eba4f5

  • SHA1

    db07feaf6cbf10a0565d6a2551470f5b73df5640

  • SHA256

    4362503ea439c291d05a1901669c4bb3e1a88d7376c3ba7c85fb7e9be0a85ac9

  • SHA512

    fe4cceceec0ff62f6b457f1de3ea2c38eaa5e8110d30d6904d0fa554c582d59c5fe97c5153579a2d47cba58dadca31e02010d398f71b57e7c6ba9a5b9f0b22d0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBQ:AnBdOOtEvwDpj6zf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_6b6577ab09ac63517c63250ed5eba4f5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections