General

  • Target

    2024-04-05_52e47b735c953d1159e8042f21df7e89_cryptolocker

  • Size

    128KB

  • MD5

    52e47b735c953d1159e8042f21df7e89

  • SHA1

    8314c3a3bf775402b7d9f5c561f8c54490726bb6

  • SHA256

    68b54508c8ff96d1b80a48775bbbe66457efc56ad2fa5060b5839587f716e892

  • SHA512

    ec1fd81a1b3947c5d41ea74b52f2a7dc8307600aae24e215dc67da682bd000fe5440621ed3c748fcc2784419c9c8f2a517f5bb732d64411a2a4bfdde8b2ab047

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7a:AnBdOOtEvwDpj6z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_52e47b735c953d1159e8042f21df7e89_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections