General

  • Target

    2024-03-28_8c21d95f8823fbfcffbe7e2259c1cc0a_cryptolocker

  • Size

    35KB

  • MD5

    8c21d95f8823fbfcffbe7e2259c1cc0a

  • SHA1

    e16135c5e16ce66b7b8387d8b1633221cf5adaca

  • SHA256

    31aa0dae17087a7bfbc370219f253bd6bc8bee83cca126db604b2bfa3f960cac

  • SHA512

    8781442286b274806081e8f9fb3bb356992875dd3b3b73fbe7ba1a69118cff220d587d89a1afe4ca9200e0827570e1e05254467f5ad64eed18836fd36939088c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpklGF:qDdFJy3QMOtEvwDpjjWMlM6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_8c21d95f8823fbfcffbe7e2259c1cc0a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections