General

  • Target

    2024-04-09_d07472e6d22cc966fd883d8ea55a9632_cryptolocker

  • Size

    36KB

  • MD5

    d07472e6d22cc966fd883d8ea55a9632

  • SHA1

    3e1f5ae967928cfcebf2d87d445b7afeed88f2ca

  • SHA256

    914a77ac8ef55835dbcf6ead22a3807377110d3d2fdb6e034d669021cdf8bd30

  • SHA512

    620d2fef0ffb46f34a2d4f3c44496ceb9ef47db72a47a27393d1815a1f98ed85722466d8362f8c5a977c4ace2485f50d4b658a460faf3d456873e9e484d9ba90

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY3:qDdFJy3QMOtEvwDpjjWMl7Te

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_d07472e6d22cc966fd883d8ea55a9632_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections