General

  • Target

    2024-04-18_bfbc55635136ae82d651b2996e25a5a7_cryptolocker

  • Size

    88KB

  • MD5

    bfbc55635136ae82d651b2996e25a5a7

  • SHA1

    47503abdc2c4ca5b07066f2d00f364bbb8a1d73d

  • SHA256

    22ca49bcc49ccf8c9b48e2b5dce57654d3182d7c4fc913cf8c2eec13028ae67d

  • SHA512

    98f1d5191ca2b93db81ae8d89016bbd5898753e992eb1369f24088df17531a27456e7958893b5ea30fa9b92ef7e0cc264fd9fb37a0875d13a81ffe78fb2423a3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIA:AnBdOOtEvwDpj6zZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_bfbc55635136ae82d651b2996e25a5a7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections