General

  • Target

    2024-04-10_ef861f7691bc8fe0a63d3ff02ffe1cc9_cryptolocker

  • Size

    129KB

  • MD5

    ef861f7691bc8fe0a63d3ff02ffe1cc9

  • SHA1

    17e4b09449b6bd806c84d27f3d01b8a52fd2a424

  • SHA256

    6c5aed49a8a903c79d48c92d5071a4f9fad00309f387aecfa0feb9732f2af7b3

  • SHA512

    7961db48c250dbb2e582ca7ed75be91d2c9e5f75fc81bf35bd9ca81316f5768e928365a6aa4f3dd6000acd92c4583990ce35c750903772582622cdc8f33b2ce8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eI7M:AnBdOOtEvwDpj6zF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_ef861f7691bc8fe0a63d3ff02ffe1cc9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections