General

  • Target

    2024-05-08_1b32c600ecc7f0a9048a604b69d8589b_cryptolocker

  • Size

    88KB

  • MD5

    1b32c600ecc7f0a9048a604b69d8589b

  • SHA1

    70ae1752c9bc97d1c8e5720012ebdf7c31b3050d

  • SHA256

    35897a944edcc99d84f2be5d8769d324ec30028ae9c5c5c18e21def06cf54a9a

  • SHA512

    35b297874267b1f1c88e23b1eac1615f549b605a5cb2203933b05e61057794c9758b39656973a9c9161a05e8b1b55d540fb974dc72d1681966c7578d09b7274c

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODX:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_1b32c600ecc7f0a9048a604b69d8589b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections