General

  • Target

    2024-04-04_2be1b8c7004db9bcad5468903241e80a_cryptolocker

  • Size

    36KB

  • MD5

    2be1b8c7004db9bcad5468903241e80a

  • SHA1

    414e2f46823f3af7f9609c15fff94d1d5980f0fc

  • SHA256

    fe080f9379bf2d40e62a64192c4aaa5f685cdd210080a49fdbd7b3948504d656

  • SHA512

    e0be97b0916de4b88945dfa6e949c1e1a2cfefc3a07bce57b85b67c26fc775fab4fed53f352e4c7095e67cc18cce5559ae9d60f2d3849349f1dde29920eea0e8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITE:qDdFJy3QMOtEvwDpjjWMl7TE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-04_2be1b8c7004db9bcad5468903241e80a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections