General

  • Target

    2024-04-15_77930273b3ccfbce5076bbfbea5a7b5b_cryptolocker

  • Size

    67KB

  • MD5

    77930273b3ccfbce5076bbfbea5a7b5b

  • SHA1

    447fdcb83d14f25eff9a011a2f6205b06dc74ab0

  • SHA256

    3187e629810e7c88c25a846f4721a0b74477b14501ae96d51dfc0f90701c31f3

  • SHA512

    476f7b3fce46a50c12276186b3d92eb9304d13264a3f445f1083fdc2a3bbf147638fb155aa0451906323330c2913f9c4fe091e148825ce7ebf75d99003aa7518

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PN:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_77930273b3ccfbce5076bbfbea5a7b5b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections