General

  • Target

    2024-04-05_050fd9d0923756d800fa34cb4e028dd4_cryptolocker

  • Size

    66KB

  • MD5

    050fd9d0923756d800fa34cb4e028dd4

  • SHA1

    8c5885039c932ed71015990254002e6d7cf65933

  • SHA256

    9da8d8699da4ee1837e7885f02e2323017d2932782b1fd81a69ee1a05cb861f3

  • SHA512

    b126d873ded7c6bfe5e46c193138eaffdfc8c4b27bddffa3bf24e7f1910ccb2f2638cdca18e2f9f1a2abad4cfa481f7be756e68642f44cba6daa550e3964c11e

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P9:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_050fd9d0923756d800fa34cb4e028dd4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections