General

  • Target

    2024-04-16_156588db18c56e4687477832ec4ba6ad_cryptolocker

  • Size

    86KB

  • MD5

    156588db18c56e4687477832ec4ba6ad

  • SHA1

    e8add9ba86214cdb1b5c416dd360a04fa53e81e1

  • SHA256

    29258f41200b5126f828d6bc43a56552b7bbee062928bc6318fccf848dca85a8

  • SHA512

    cfa7f49a8db62b7643f64f1f5fc1e8d8c21fc334797b8d46ce5ac01dff4596b587108a871ec0201ddc4c14d47ae119b7bc2f8cea2310e0f7b3c5baaef13f082e

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODs:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_156588db18c56e4687477832ec4ba6ad_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections