General

  • Target

    2024-05-23_8f70707fee0c7f92644e24dd5c7e5353_cryptolocker

  • Size

    89KB

  • MD5

    8f70707fee0c7f92644e24dd5c7e5353

  • SHA1

    f66cd86eba5d9b9c4e17a4ef508ffad13247fc14

  • SHA256

    d95aa71e227cb734782029fd861f0b1537418532db537dd03796d8dffcb4fdae

  • SHA512

    6434122e8c43e46fc6719cc9e8dbd1acde5261d0d9a0ae69273dbbd57b65e34e46db11210e9d07e29b627fbc536a1c03e6cf8e4aeea554adbbc7ecb2e2e539fa

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgQG:AnBdOOtEvwDpj6zZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_8f70707fee0c7f92644e24dd5c7e5353_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections