General

  • Target

    2024-04-05_535ab6d3b402995b29af0b6b1c949b8f_cryptolocker

  • Size

    128KB

  • MD5

    535ab6d3b402995b29af0b6b1c949b8f

  • SHA1

    e8ed8591fcd14aaeb84302c5d0ea22ec454b6e0a

  • SHA256

    58ab40c3b9b1749560ddf4a2f11d6a22987f40c530e86524be67b338ed99b330

  • SHA512

    7cbc26cd592efc0446fe11fc217b650f6d5e1deabccb2d3d2506cec63bb5b9a1efffce74ed229c907a44848aaeb6123921653489af4b077761c45471e0c8007a

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebHu:AnBdOOtEvwDpj6zk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_535ab6d3b402995b29af0b6b1c949b8f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections