General

  • Target

    2024-04-09_c74b8e49ee159d686ed84b07a57440f0_cryptolocker

  • Size

    66KB

  • MD5

    c74b8e49ee159d686ed84b07a57440f0

  • SHA1

    7548fbb95d0cf72ac39bde2e860bcd02ed0bbaf2

  • SHA256

    7303ecb3af52e421bc4edce8548159490ad87218b3619f2c734d2ca10821d98d

  • SHA512

    0b8c6c9712c79d19858f67d62e47d427e8bb0be60af64920831e9e6bf65548b477a1a9f0c61cc701638b64003ea6f48c2c1b234402ed84fa80260761a693a76a

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Po:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_c74b8e49ee159d686ed84b07a57440f0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections