General

  • Target

    2024-05-03_054f31f150a6374ed285b4b4b9364f6a_cryptolocker

  • Size

    87KB

  • MD5

    054f31f150a6374ed285b4b4b9364f6a

  • SHA1

    e43bee0208e85ebab00d65184ac298cacf98d8ff

  • SHA256

    b8042d56972574e5d2fcf5d55505e9eb094e5bd6b11e7e48c33b2b209894ff78

  • SHA512

    751ac101ff4ade4ca235d11bbcef13522e5a76791a84af3bfc1820295c3f19392086585a77bbf96b03b9f4eed8425af80fba1ad627e7f0117112b14cfab95918

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODq:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_054f31f150a6374ed285b4b4b9364f6a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections