General

  • Target

    2024-04-29_118169397df50a755593bb87c068d777_cryptolocker

  • Size

    88KB

  • MD5

    118169397df50a755593bb87c068d777

  • SHA1

    980fc7cd40f7153cfa1e8141b6d2326667e68066

  • SHA256

    868ff39c264548dd17325c7ddf6982d8e50665fb3472aefaf9b603b11d74439c

  • SHA512

    e67657a8b3d00b83b0e00924c52102ec803df2b878674afa90ab702d09e0b97bdda6b2a3b4da02a9e0883b48bf230592cc3e4b75e0535d900946cbb14b62c0f3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgd3P:AnBdOOtEvwDpj6zZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_118169397df50a755593bb87c068d777_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections