General

  • Target

    2024-05-11_012fac638f796a260350e5c629f58376_cryptolocker

  • Size

    88KB

  • MD5

    012fac638f796a260350e5c629f58376

  • SHA1

    17c0d9624cdf6ed6847ef908c17a369fbb027c05

  • SHA256

    56b65cea13d03c44a4bc8ad8bb91435f34e5d999c78c7b9a459f403f8f3255b3

  • SHA512

    cfdc9e99949d4c528cd0bbe3a163b6f86b5dd4e48523122a31d6c284737cef91b3a2dd3bed19f49b12a3bcfae65ebc2fb6a4797373d2fcd86797c92d30d7c44f

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODH:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-11_012fac638f796a260350e5c629f58376_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections