General

  • Target

    2024-03-27_eb7b976024a823741331c29a3f50b9dc_cryptolocker

  • Size

    49KB

  • MD5

    eb7b976024a823741331c29a3f50b9dc

  • SHA1

    66b6b78f76a195a0d7af618b21677657be67d56e

  • SHA256

    5613278bbb48e7dda63e50c19c11c85794a46e2cfb0d27ed86d0edff2e1a66b1

  • SHA512

    5f2cf896cda19848e413e2594b1c0904706cbc4ce893d6dcca40cd8dad6100410a24bb06548e767067b0bfc817f12c3b243aa6eb79233e0579d5736f4337e12e

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWL6:m4Q2ckzIOtEvwDpj4HYq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_eb7b976024a823741331c29a3f50b9dc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections