General

  • Target

    2024-04-05_b2542c75a3d8f25c9d39a82669ad5e6d_cryptolocker

  • Size

    36KB

  • MD5

    b2542c75a3d8f25c9d39a82669ad5e6d

  • SHA1

    f4bd548714ce5b0c507c87f5e4fac28ddfed78f5

  • SHA256

    956b31ac5fb5d9e606a50705287229fce02afc89422907263be85d4c989e8752

  • SHA512

    70dab15d3747dd3988b6c4b5b34459776b75850ba239e08bc0c0f55314697c9f324884d4cc9ece0cc8cbb0afe5726f42d066d7c4562226220138e5b14bf99a76

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYr:qDdFJy3QMOtEvwDpjjWMl7TC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_b2542c75a3d8f25c9d39a82669ad5e6d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections