General

  • Target

    2024-05-28_b1aa72827535415e1fcce15f9b8e608f_cryptolocker

  • Size

    89KB

  • MD5

    b1aa72827535415e1fcce15f9b8e608f

  • SHA1

    ce47fb30e6b333d1f865519f406a18c2a45e9f64

  • SHA256

    2a7e9e9dac9e0c911b1439f680a183b33a3ed618f8fd254cf90f53e5add5ebc9

  • SHA512

    dbecff7890c39db7847ae303e3fa87bd073e45bccd5b342cb9ae2e0495cea0ba3c1e01000c0240333b5bf6f42fb7f9fd02c806cf96d3e89a156e9714970c7d7f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgiC:AnBdOOtEvwDpj6zN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_b1aa72827535415e1fcce15f9b8e608f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections