General

  • Target

    2024-05-10_35949be9e5598fea9d9a5a8bd1a88add_cryptolocker

  • Size

    90KB

  • MD5

    35949be9e5598fea9d9a5a8bd1a88add

  • SHA1

    c43b91bae55b1b90f68722b0712bad2522cdb3db

  • SHA256

    3562a2f4bacbb71b7381c46769f9be0c665c64cacef895af9e7fabba705d3f2f

  • SHA512

    e1f60ae5b091db3e44e90eb34f1884a25b32f12558b6af7fbffa7e7be6e18969119e87c7357fc12c1fdce92b414149e76890f436d3af0808146b057d69c95935

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIt:AnBdOOtEvwDpj6z0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_35949be9e5598fea9d9a5a8bd1a88add_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections