General

  • Target

    2024-04-04_606466be7f6d1b8edba9b9fa389f2c76_cryptolocker

  • Size

    36KB

  • MD5

    606466be7f6d1b8edba9b9fa389f2c76

  • SHA1

    2e8eff789cd1a6a99053d1138f3e1020ed99419f

  • SHA256

    830d6840bb0b87ef485edd9f68e964d51fca96aae0fc018d8cc546d42a35f193

  • SHA512

    16e46ab88102037a2fde69e3a4bdecb04e96e74c46595015187092727e246dc56fbc6be41eaa69f7ad119448ea17f8d62dbef369159ac6a5b0f5a5b01aacc8dd

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY3:qDdFJy3QMOtEvwDpjjWMl7TW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-04_606466be7f6d1b8edba9b9fa389f2c76_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections