General

  • Target

    2024-04-15_9c4fc9edc5c3b8192ee77b575a02f22a_cryptolocker

  • Size

    70KB

  • MD5

    9c4fc9edc5c3b8192ee77b575a02f22a

  • SHA1

    8c64349618167bae41c476fb6c0088367862f911

  • SHA256

    1627c9e926eb6343ad6d392f74054fbfb5e756af13a4748d5ad76eaf2ac1f198

  • SHA512

    5bcf2af8a33989b8a5e555721c9aba11791534c2e158a5e1a1a80861beb24dba1641fa5e97613e8558e44b66016c911b3dc5d2b21a6fbae9b8d48c8d21be7898

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9T/:C4Q2c94OtEvwDpj4H8zG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_9c4fc9edc5c3b8192ee77b575a02f22a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections