General

  • Target

    2024-04-10_1ff545f0f4bf87485da64d88dd47e4a3_cryptolocker

  • Size

    67KB

  • MD5

    1ff545f0f4bf87485da64d88dd47e4a3

  • SHA1

    8b61c4af66c6f1b24aa94b52704591f8a15c5faf

  • SHA256

    7fbe8a8d1ddbdf2b9fe3d0c9ad85f361be3440221ef66ad3bf839f79ed7d0074

  • SHA512

    4a36f2ec0d578198c40edd8d57c7c85cbcf4fd9802a631cbca9d16409eb7a16b9708a321e14ede67395d76cf9a7f20524ad124555fd3baa0df7397a9c20a4320

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pd:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAd

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_1ff545f0f4bf87485da64d88dd47e4a3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections