General

  • Target

    2024-03-27_dc87d82166db99a2793e26e5b2cbcbeb_cryptolocker

  • Size

    35KB

  • MD5

    dc87d82166db99a2793e26e5b2cbcbeb

  • SHA1

    3e3b430cca20ada34137bfe36cf3fde3c451f36e

  • SHA256

    9fbe41c1b4cffbcd14a71539b89a1c07d009922f96cbc64b0a5a51ce37deada8

  • SHA512

    42603c6709b4a620074e7db20a550965595595eaef76118e89f8ae0248b7838e7a68dc24dce252a59801f63dc0f1984fc24208fa1da3d61952b965523abf5c2d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT+m:qDdFJy3QMOtEvwDpjjWMl7TZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_dc87d82166db99a2793e26e5b2cbcbeb_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections