General

  • Target

    2024-04-16_3f0f207a9884d2aa02cb1c1e08070361_cryptolocker

  • Size

    100KB

  • MD5

    3f0f207a9884d2aa02cb1c1e08070361

  • SHA1

    6e782dcce382d0ac47a18f2cf7ed0804103206bd

  • SHA256

    c1bf2863c67d1504c3408a0ae3a6801847f6655d14ebf8e8a6d87d201911a7ee

  • SHA512

    5e88966e3c789effc69b9bcabbd8a5c03840dae6741106f53b80222212d5e3a82757acd68713c50ff4c1c00c7fd9e6c23b62714d88c41b204975438852db4d8f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBa:AnBdOOtEvwDpj6zR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_3f0f207a9884d2aa02cb1c1e08070361_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections