General

  • Target

    2024-04-11_3f2dbd1bc62483f90673eb7fa5c153de_cryptolocker

  • Size

    67KB

  • MD5

    3f2dbd1bc62483f90673eb7fa5c153de

  • SHA1

    0338b60b6f343955fbcbdc26c723a0934b751e98

  • SHA256

    71242b90b535e7e7a2850aeb7c421103678cd5ecb892ce3fa51b621d62ecf484

  • SHA512

    b9ed6f3b9890c5a16b1915c42fc2a188cac6140c415de22227bf4c4fc1fb029d1f301078ad823d339a254d8002712b568797b67635393c074a633b9839d385ab

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Po:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_3f2dbd1bc62483f90673eb7fa5c153de_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections