General

  • Target

    2024-04-08_c28f99c13b70fa99f47379200335ab85_cryptolocker

  • Size

    36KB

  • MD5

    c28f99c13b70fa99f47379200335ab85

  • SHA1

    2b22ea86e7b2cec01e27c3a0666a6141c6cac16d

  • SHA256

    f3c91ad41f0d8e3d7aa6b132760ed0173bc19bf97244cf6af26f397ea0227421

  • SHA512

    f46c69487202032893b1968eaae8488f1d298d743d03453f5c98ca6e6f07879b275b56e332f29911bdcf7be3d13a0930145d7f701d0da9ad7d7386bdf9f0860f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/Dpkj:qDdFJy3QMOtEvwDpjjWMlQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_c28f99c13b70fa99f47379200335ab85_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections