General

  • Target

    2024-05-17_b2a32a4ecc8881ef06e2a45de6e96e88_cryptolocker

  • Size

    91KB

  • MD5

    b2a32a4ecc8881ef06e2a45de6e96e88

  • SHA1

    4d88977670a8da6681f4b1ad90abaa682f72dbbc

  • SHA256

    fd87cfa15bd60ac73c58bc06eee4f470631815a58e18dc8f6133fe03f91ac339

  • SHA512

    2ef034c8dae9b9a43b9478c3b54baf002bca9be2d3b69c6529a1d2946c4162624651f3f07c9de6b4a4103af73b818f1b2e362b21dc33b6f5ded744a28f967d84

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddh:AnBdOOtEvwDpj6zl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_b2a32a4ecc8881ef06e2a45de6e96e88_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections