General

  • Target

    2024-03-28_238335f25d3a7b7c6d5565e789aa1fef_cryptolocker

  • Size

    35KB

  • MD5

    238335f25d3a7b7c6d5565e789aa1fef

  • SHA1

    c40fed2748f45d2aa5f78e85a9ef14de23fa5b9e

  • SHA256

    ac8e2b683f2956381cc3966ac55dba3d5c96273d8884daa6be15dbe77fd066a9

  • SHA512

    e1bef91dc5613354fc5885b25946835a6889c7a6f32958f27af95cef55aefb84f2436c9694288b96d4d777ecad16c0868565d145ba6e543c5137dad947f23c02

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkKI:qDdFJy3QMOtEvwDpjjWMlU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_238335f25d3a7b7c6d5565e789aa1fef_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections