General

  • Target

    2024-04-11_297f3ae3fe6dd9aafb3e1b70bcded0a9_cryptolocker

  • Size

    129KB

  • MD5

    297f3ae3fe6dd9aafb3e1b70bcded0a9

  • SHA1

    c9e369d224488bf752fffb35f4804eae791bbdbe

  • SHA256

    51e438ce9596a5c199cce8a45f11c084e4eea5e8dc4db09b9ae87deccdff009f

  • SHA512

    ae1bcf3aa85dcb186c2947c870b42151b67aaaa58b5e64ac7f067212d180df29ac15db571eee80af1e75737e647e0bb89d16227ef05ea3dfcd4c98606b67ce3f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7D:AnBdOOtEvwDpj6zu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_297f3ae3fe6dd9aafb3e1b70bcded0a9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections