General

  • Target

    2024-04-11_a1e298a37948fee945e6dadfa39091bd_cryptolocker

  • Size

    89KB

  • MD5

    a1e298a37948fee945e6dadfa39091bd

  • SHA1

    db20d8c0b2aa629ab0763924126148f2a27ac6ac

  • SHA256

    4b75982e5777f78bc5eeeb8b59d58ab8dcaf01f6474b2cf6e29b548f505e185f

  • SHA512

    d4cedcf122883cc1a959dfda038ea2de90b17ac51d1aa022761f1926fb01c1cae797c80bd6f761d25b8a5c9d403ce565b42d2e2f0f607127b5cdf1efa186dfea

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6P2:AnBdOOtEvwDpj6zh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_a1e298a37948fee945e6dadfa39091bd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections