General

  • Target

    2024-03-16_9137172a2d0f078856dfeb38e8cd2cc7_cryptolocker

  • Size

    35KB

  • MD5

    9137172a2d0f078856dfeb38e8cd2cc7

  • SHA1

    840d4d709c0f7b796c42f68eec7e32de57bfd5d0

  • SHA256

    d4761b00b6871b7cfb21b06e6c3412511e358ae1c11061a6341bfd47d67dc509

  • SHA512

    ce3cbbfb56fb7ff311efff890dda287cbdf24ee4d6754c3822b75dac689f45efe68019673d1c02184fa5fe9c51801d8861d6edddd93b20cbff0e6b2e26f001a4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/Dpk9:qDdFJy3QMOtEvwDpjjWMl6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_9137172a2d0f078856dfeb38e8cd2cc7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections