General

  • Target

    2024-04-20_cca5cd73abb0a3d4ae2d5fddf9ae31e6_cryptolocker

  • Size

    129KB

  • MD5

    cca5cd73abb0a3d4ae2d5fddf9ae31e6

  • SHA1

    9cb8a878dd74c9a3985bfdd489b3fcfacca1c0ac

  • SHA256

    a862dc3c23da84a100020856a98bce20f4548d5e0793e0cd09596bfa330b5807

  • SHA512

    7dda216eb02d4a002690653eb9588079bdeb945a34a4daccdb2511659ca0a554c1320a00980866fb40597a0db22f62563f44a69d3ca645cda0691760b75bf8c9

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7T:AnBdOOtEvwDpj6zG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-20_cca5cd73abb0a3d4ae2d5fddf9ae31e6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections