General

  • Target

    2024-04-19_6bf8bab80a24f55fa726a26380eafdc5_cryptolocker

  • Size

    129KB

  • MD5

    6bf8bab80a24f55fa726a26380eafdc5

  • SHA1

    a5e847867ae2c08a10ac2dd42a9429d8a7945350

  • SHA256

    3b845aad0afe3d177701a375f8968ecd30f920d11a16c1884c40fb10304c70fa

  • SHA512

    4f0bcc62669a555629d7910752b4f2993939793db112ca063e7220c3068da4860f28c8ebf6ea39530f9852a7f42006820451b556fb1c8be1734f08136bf56f67

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7N:AnBdOOtEvwDpj6zU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_6bf8bab80a24f55fa726a26380eafdc5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections