General

  • Target

    2024-05-12_124634c90136aacf188412a14aab3d2f_cryptolocker

  • Size

    70KB

  • MD5

    124634c90136aacf188412a14aab3d2f

  • SHA1

    8c4527094c55641dc75fb5a34d6204b52ff90059

  • SHA256

    e9e9d61ed126807a7e9ee309da3cf21f9f3d199a5d06aa9c583d757fd1249764

  • SHA512

    6808bec40e77b47a8a430e965ada3af45495e33e5d5c506e33e4eaf487eea295d441c8b3b5388c092faa6ae1e7e0e7ca09b8fbde9aa12f222d2e1390dd5f2fc8

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9T:C4Q2c94OtEvwDpj4H8z2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_124634c90136aacf188412a14aab3d2f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections