General

  • Target

    2024-04-06_adef7d5bf833c0c695aac959f58643ec_cryptolocker

  • Size

    36KB

  • MD5

    adef7d5bf833c0c695aac959f58643ec

  • SHA1

    3709b31a9a5fdd0097f15d10aecf780e20128cda

  • SHA256

    fc9bd652c65a44d91792de48ef61d6bfb85a714cadffdb27d11a64764017f8fe

  • SHA512

    10e4fb576e2a1db2ef594dd50e48b7ad6303779a00527d5d3a44ce2b668af897e447c4bdd1b38e378a5657d048669185b87ba6dc5fcbccae85f5329887ef3c7e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkA:qDdFJy3QMOtEvwDpjjWMlz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_adef7d5bf833c0c695aac959f58643ec_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections