General

  • Target

    2024-04-19_f79b54fa47961882347a68690ad6d6ea_cryptolocker

  • Size

    100KB

  • MD5

    f79b54fa47961882347a68690ad6d6ea

  • SHA1

    02f6f14f0f44b09fbc9a5c416130c8c64a592f26

  • SHA256

    5834db5cc1e48668c6cf5cd92a295856d08820fb297f50e9681e4d645f8b42ba

  • SHA512

    3b63aea44159df0620e02de121e3f657744a99829cb573051069f9238dbcd71d6207f953f002fec79d992f1b153cc947942df9906a3e8a938b26724deb1c7c54

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeB/:AnBdOOtEvwDpj6zo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_f79b54fa47961882347a68690ad6d6ea_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections