General

  • Target

    2024-04-15_d19e1d64d1539cc93eb3b04239bfb6b7_cryptolocker

  • Size

    67KB

  • MD5

    d19e1d64d1539cc93eb3b04239bfb6b7

  • SHA1

    5d6a61a62dc7f726b7efa7381edc309043227284

  • SHA256

    1487995b0e47ca32605b93b249c75c763903b38cd90fa158b5e958c80bb80f21

  • SHA512

    410009a0ec61e7bc2c529aedd550e78efa65820451e7bf65e0b51dcfb48759e0633b3ea419c3ff37fa44aa1629b3ac03dec6312ce75fec9dfe6f6d5232fbddd3

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pe:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_d19e1d64d1539cc93eb3b04239bfb6b7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections