General

  • Target

    2024-04-15_d2971ad81d740d1043f96854f733c21b_cryptolocker

  • Size

    37KB

  • MD5

    d2971ad81d740d1043f96854f733c21b

  • SHA1

    598bef4e41d80685fb8e75288a1d2562cdc10aec

  • SHA256

    62b0cbf5c46c80c5ab9d670f71375cf2e75a9d65cc038e7288b5d747f9d4d0bb

  • SHA512

    90635ea180eb588fbd27c687f61bdecb6408db6d50ac5536adb5ffd2759eea4fcc617e97b7f4920cd5df3b1db6fdac87b3d6ce6c33970fad534344e8cc690aca

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY2:qDdFJy3QMOtEvwDpjjWMl7Tf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_d2971ad81d740d1043f96854f733c21b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections