General

  • Target

    2024-03-28_1495dda87a85a9348d129e97a021afd6_cryptolocker

  • Size

    35KB

  • MD5

    1495dda87a85a9348d129e97a021afd6

  • SHA1

    80559fd07a1a10b31e9a76bd81f6f58e57a21c9b

  • SHA256

    ef5f0caa5b0c6895eb1dadaf031fc69b0722b61d5b8a43005f6dbd226ec87edc

  • SHA512

    0a627f004a4ee58555d362fd0ea4af7d4c7fa2a1f35c04825eefae3139672d3ef4066e547a3b30b6d27424bacec054b9840aafcfff7b8e25b77a9295c5957452

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkIT5kV:qDdFJy3QMOtEvwDpjjWMl7T5kV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_1495dda87a85a9348d129e97a021afd6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections