General

  • Target

    2024-04-15_ef78e582a22d1e35ec022cc166d722c6_cryptolocker

  • Size

    96KB

  • MD5

    ef78e582a22d1e35ec022cc166d722c6

  • SHA1

    3b9cdf8af6aaa62c5a8f789cabb9e8d97dc1d5ef

  • SHA256

    8f6001c03119c2a1b08bbd86b703ae20241930ac45f0f7c055187598a4e6681d

  • SHA512

    c1207ce5775b47ed4a8c97bd0e675cf2e689362cabbd6f1ec881d5e7248dda21d1db13e4d5094d8024c4e06be9305d8462fd29dee7c00c7692e5f7b96b93b5a3

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYy9Gk:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_ef78e582a22d1e35ec022cc166d722c6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections