General

  • Target

    2024-04-08_d9016ea2c25f76a5259d58034ba00397_cryptolocker

  • Size

    95KB

  • MD5

    d9016ea2c25f76a5259d58034ba00397

  • SHA1

    3f81ba4dbcd14e7b6b898efbc6bc610ab2ceaba2

  • SHA256

    35c650fd0aa049455ade3fe8b9dc572e7d3a9e58ca8c8bd90ea05194e9c02120

  • SHA512

    ecb771097950c3045c60b5d42a87b1b681cc89fbc3d7ccde2a0e69ed8489577c7908dd234220bf90780db48a5bde58e1ece5b190559b26667ce9b7ad42c2b407

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYI9:AnBdOOtEvwDpj6zS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_d9016ea2c25f76a5259d58034ba00397_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections