General

  • Target

    2024-04-21_3ba62f86c310acd27d015e198d852727_cryptolocker

  • Size

    101KB

  • MD5

    3ba62f86c310acd27d015e198d852727

  • SHA1

    fde958b119a6f1025d1954788e99edd5e08f7d14

  • SHA256

    b6738b4db3c090c55ffbea4a034a88a8fbafc2115fd9f912ea1b3dc6a77b8ff8

  • SHA512

    5c4fdee3392dbf74ed31a5d60a7fbf2b1562ab42959fb6540f9ed19c7ff8aeb2823ef5a2b7f9be1f1010a33bd0a5ceadcb500552a1f8c36e1c2734e8a749ceee

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBy:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_3ba62f86c310acd27d015e198d852727_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections