General

  • Target

    2024-04-06_30810b580d142e175744a0090ec99cd3_cryptolocker

  • Size

    69KB

  • MD5

    30810b580d142e175744a0090ec99cd3

  • SHA1

    682672877ec9541ce8350d3f36ba5aae10368edd

  • SHA256

    7f5e6ac0b1c83ceee0d108a1ab48cadbeea75ee93439aeda4ce991d947ee4c66

  • SHA512

    a9a917dd4cfa46f876d01dd33848bdb5679265c46d117d131bbf6756165a903e788224ba1843fafd22b5a211dd2f09cfddbc25b260af428aa898cb3f80556891

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs98:C4Q2c94OtEvwDpj4H8zd

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_30810b580d142e175744a0090ec99cd3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections