General

  • Target

    2024-05-13_b1dcc3d4f1f3975395f5c34cd181655e_cryptolocker

  • Size

    89KB

  • MD5

    b1dcc3d4f1f3975395f5c34cd181655e

  • SHA1

    faaea5841d53954d20a9b498bc1e0778d5bffcc8

  • SHA256

    8772ee01ad3994184ac3a8c182de5e248aa9bff1fc644a768f2b006e56b836b3

  • SHA512

    3c66a2f3a88a93cce17da2f87b8fb31b3150d2095be7e6a7d8f4e762284918886f98cc65bcddd4b33369f62259bd105a4cccf9137cb380f6219a1cbccaf235c8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIi2:AnBdOOtEvwDpj6zE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_b1dcc3d4f1f3975395f5c34cd181655e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections