General

  • Target

    2024-06-04_884a03bcff6434ccc29c689aa8539b67_cryptolocker

  • Size

    90KB

  • MD5

    884a03bcff6434ccc29c689aa8539b67

  • SHA1

    47db764ae887f7c80ae30a7e3f2d6d8f9bd8c479

  • SHA256

    1bf7bbba5bdd5bb78d3efc64fca697f5d003adf580446506126c3e916ede9e4c

  • SHA512

    89424e23aa4370f969f23b31da7ec49cfea7c07bb5f221856c2638e60c0cf2e7cf4290e7bf97befa9c9dc086ab18d0ca5156450892ef981f3913a2c1fab73b88

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODhxw:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_884a03bcff6434ccc29c689aa8539b67_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections