General

  • Target

    2024-03-25_f9c4ea341e7a73d941b8eed5ce677171_cryptolocker

  • Size

    36KB

  • MD5

    f9c4ea341e7a73d941b8eed5ce677171

  • SHA1

    289aaf1048a8af6c34ef636867d72cd89ad7c1a2

  • SHA256

    b1ad141dde9a6a63cc8a2c5cd15f91380a92e135d92c847267c37e5ab9c64a43

  • SHA512

    75316ce219ab5a39782dc88ebe8ff54166825f518ab137bb0e4b5c34862339d236d51415c5b04c5b227da074a2a21878dafdde20eb8cf3cc07804260f91b8fe5

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkU:qDdFJy3QMOtEvwDpjjWMl/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_f9c4ea341e7a73d941b8eed5ce677171_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections