General

  • Target

    2024-04-05_4a9986089c17bc32cc7a98fdc937825b_cryptolocker

  • Size

    36KB

  • MD5

    4a9986089c17bc32cc7a98fdc937825b

  • SHA1

    693264fa1e4478cb8d2de61162f1311593268258

  • SHA256

    7428cab16f0af16a57368cd5f00b16d9c96d6f277467715a3774cc2e79ccdd01

  • SHA512

    1b4eb7a21bcf18c9126f9822cf718427784e2f55bad2a79ab422858aefb4cad0303b5468c98cf2daa5ceac57b32fe1a8e7d4d50b50dca4025b511c868ac3420b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/Dpk41:qDdFJy3QMOtEvwDpjjWMlB1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_4a9986089c17bc32cc7a98fdc937825b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections