General

  • Target

    2024-04-17_b6da397ab1bdedc3a26c5ea6a9e2bf17_cryptolocker

  • Size

    129KB

  • MD5

    b6da397ab1bdedc3a26c5ea6a9e2bf17

  • SHA1

    9dca87172dd32ae62cd89f1c59d8870c8c3d0a18

  • SHA256

    c89fbfa9389e1aa00aa9aeb36d9c2d322c42da4fd480247bd784b0c959fb65b5

  • SHA512

    efe158f4de0db80290a1fd9f3ea36de0831a8c1023a40bc64cf8101f8436555866b880a18dacc50ce74aa7d9dda0ceb2255035299943270d4025a53ab5ce6e44

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI74:AnBdOOtEvwDpj6zB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_b6da397ab1bdedc3a26c5ea6a9e2bf17_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections