General

  • Target

    2024-04-22_f8301a3455cbf931c0c0d9d946a9d396_cryptolocker

  • Size

    130KB

  • MD5

    f8301a3455cbf931c0c0d9d946a9d396

  • SHA1

    23454440b3fc04e8059597130692ca0d112fb96b

  • SHA256

    96022bc958f04038362998be9d3469cdc075051098b3c4405023e48d29979bbd

  • SHA512

    a3605177029109d7875fce4ea8b972e48906e7606db55cdf72d71a01a17cbf9d2c4042a4b548d26808592127cfc780ce60a587774941925d7663f095d5e0239b

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7W:AnBdOOtEvwDpj6zz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_f8301a3455cbf931c0c0d9d946a9d396_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections