General

  • Target

    2024-04-15_49908e6fcdec9c131078465d103f172e_cryptolocker

  • Size

    67KB

  • MD5

    49908e6fcdec9c131078465d103f172e

  • SHA1

    0241a1732f6e5e7797ae5d21d4da4ef8ebeca9ab

  • SHA256

    c0a38c1f314eb2e13f325a98fd12e19d1a81125fb90341dca96c42a7f1566a98

  • SHA512

    e9384c98298dc1b5ebf4fcf200a551614d0e33822d789c6bc2a9028e52baf6041858b0b26e2410c8d8dbfd4f49bc312efe25ddd38008522754834496fe205208

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pj:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_49908e6fcdec9c131078465d103f172e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections