General

  • Target

    2024-05-23_688f2095962e430a79766610446f594d_cryptolocker

  • Size

    96KB

  • MD5

    688f2095962e430a79766610446f594d

  • SHA1

    6dfc1eedce6e96a69edcfb974d051d75978a3eda

  • SHA256

    9bd5648c985673448e35709c1ab3d9d13dc3957bdce9284ca9fc5782c026f1f5

  • SHA512

    c6823b382d32643a812be28942c7da5ee08af4190f73af5f31d1753a415a59152f7ec8d20d9d7518625bf0a1913b1b5dc21c892801c9f31dfbbd23f717b261ed

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01E4:AnBdOOtEvwDpj6zL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_688f2095962e430a79766610446f594d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections