General

  • Target

    2024-05-14_9ffb6dbae3ff349977d4c84599fdc452_cryptolocker

  • Size

    91KB

  • MD5

    9ffb6dbae3ff349977d4c84599fdc452

  • SHA1

    7b602801d0179e0113255971a403e0a64283488e

  • SHA256

    a3e89be5075a1db9f77e18937f98f80c8c5e9a2b0816b33b7751ea6f34eb8f3b

  • SHA512

    e3dedc862814ab90b16c0b62eb42b7927ee22c3376ece1c81fc8cb3db405c0fcd2fd4aac9715a8221a149dc823f063beacbf94173ea8f0c5fc115492e1f78b81

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddJ:AnBdOOtEvwDpj6zt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_9ffb6dbae3ff349977d4c84599fdc452_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections