General

  • Target

    2024-04-22_f1eab1aee6c7988620dd597481d32938_cryptolocker

  • Size

    101KB

  • MD5

    f1eab1aee6c7988620dd597481d32938

  • SHA1

    7febf0eeb1e606ed2cf46c4684458a1486ba9ddd

  • SHA256

    9db1651407ee06c5da8a6b373540a919bf00c576e66c89a6f90c5b44176fa3d4

  • SHA512

    866c79e83fa0477a73427ce487de8d8268cc423e2a7573904f444fc340f7fdd108b43c9df0494a5fa308f3be05c1b9b393f532e79b33f91c96176a27bc938852

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeB/0:AnBdOOtEvwDpj6zL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_f1eab1aee6c7988620dd597481d32938_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections