General

  • Target

    2024-05-11_f4c6732e6082f572e97d548403f578d7_cryptolocker

  • Size

    88KB

  • MD5

    f4c6732e6082f572e97d548403f578d7

  • SHA1

    8200660db4677ac3e2e3b84a73301cc4818d2697

  • SHA256

    49d0edb6a97b487d8c68bff3e6d02ecd001cc3f6372ed4b431ac32be408947d3

  • SHA512

    3fa3d32f43f7a669391eb2b184ad5cb68e55cc808e2f4d47e033d8f76433b5caff012ac6ea3b1f3c80a9dcf86cc540139dcf60659e0f180af64e4c9aea93e9f2

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgQq:AnBdOOtEvwDpj6zl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-11_f4c6732e6082f572e97d548403f578d7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections