General

  • Target

    2024-04-08_06d93c89a512ac60e14b439164a1eedc_cryptolocker

  • Size

    100KB

  • MD5

    06d93c89a512ac60e14b439164a1eedc

  • SHA1

    d8dede2332e6919194ef260620bbf97de7197d11

  • SHA256

    0659140c5dfe68301121fd327c70b04fb1e9c7b7dd80698736077eaa09afa67d

  • SHA512

    be81128281a644b17ea1ad4e1652c00f2e5815a91f5f1503c52b094a2e8bc3e7f582c2297afa957e4d27777bf1936d4be5f3d8d1caa7539c9a5dcbad5acd02ed

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBK:AnBdOOtEvwDpj6zB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_06d93c89a512ac60e14b439164a1eedc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections