General

  • Target

    2024-03-20_438c67f1ad3aa80aee64fbce1257396b_cryptolocker

  • Size

    35KB

  • MD5

    438c67f1ad3aa80aee64fbce1257396b

  • SHA1

    9f41ee9998649da7067682c73e7150f42203a9b8

  • SHA256

    fced233d56897cbb6818f5503e958499fbc3fed0426283dbf4bc9a93e767e012

  • SHA512

    cb183b1b831531dea5a5fd5479d2c4e318a653630be2e3ffb2585c043ace183b0dd6963f6a47ee93cf472e39a621dc89ede0f0b02635e8773a7aa153d3b141bf

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkUX:qDdFJy3QMOtEvwDpjjWMll

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-20_438c67f1ad3aa80aee64fbce1257396b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections