General

  • Target

    2024-04-17_b1d9b9e04896a477cb4fdc560408fed1_cryptolocker

  • Size

    103KB

  • MD5

    b1d9b9e04896a477cb4fdc560408fed1

  • SHA1

    231d5ab584cf334528379ce13996ea1c91f9f6b5

  • SHA256

    6702def70c3a2c46c6505860b2962afdbd4b275d5fb12d7c1a9bb7063a3d7cb2

  • SHA512

    7fdcfc47e34d43cbcdd12813927bc24b94777d1ace2ea05d884ac900bed6ef17dd798878b7ef9081426ee401b4ee6b0185707ff858384f65528750fc8fea31d6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviy6A:AnBdOOtEvwDpj6zM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_b1d9b9e04896a477cb4fdc560408fed1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections