General

  • Target

    2024-04-09_888bf9521d73ed771647b9a29f669d6e_cryptolocker

  • Size

    96KB

  • MD5

    888bf9521d73ed771647b9a29f669d6e

  • SHA1

    ab8be961be0e2dac0c9445fcf868d552433d49df

  • SHA256

    f4c1676aede641aa40adefef1326a70112f7a92a838ddd859c5a5e501cf564c0

  • SHA512

    e21ead0e6313da6f5cf7c41e77ebadcc9ac4b99e9fe806058f80a68444f602fac7a4ea007be351cb820b76bcdca0fa7b152adadc0e1f633ceebff8c097b3fdd5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01L:AnBdOOtEvwDpj6zZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_888bf9521d73ed771647b9a29f669d6e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections