General

  • Target

    2024-04-08_f81921b50f56944d0fba54a1038519c2_cryptolocker

  • Size

    36KB

  • MD5

    f81921b50f56944d0fba54a1038519c2

  • SHA1

    d90ecbb18db8cce5d39e09c24c78eac81ad6b766

  • SHA256

    3a78f0d9f79bd5a888ce1c912664fee4a7417250f4ed0c3e3969d9cbbf97c211

  • SHA512

    4edef9527a0d3353a0b09e4c37a7a42a12b01a85b49a6be2a811b15bc49fe5c9efd419fb70f0d0ac1270654c04767fa807491a01c2707e599f5a37449ae9cb68

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYs:qDdFJy3QMOtEvwDpjjWMl7Tp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_f81921b50f56944d0fba54a1038519c2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections