General

  • Target

    2024-04-22_f6ab8b98441d7767ec5fb7061f491883_cryptolocker

  • Size

    68KB

  • MD5

    f6ab8b98441d7767ec5fb7061f491883

  • SHA1

    d02d91288238a61de646e476951454070c609f83

  • SHA256

    909fbfc9f9c4aa20913f96a82e35b71b9ab5826200584b6bfbf19a9e6add6c2f

  • SHA512

    d0d2166271ccf7b453f5f99d9bece5bf7fed191cd7fe31a8449f14fc39eac35fcbe0bc44947d0d6465133676e5ca1a59d46e53185df6bcd6dc5f6726156102d5

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pv:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_f6ab8b98441d7767ec5fb7061f491883_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections