General

  • Target

    2024-04-16_2924f9d49b53f4094593c47351497b1d_cryptolocker

  • Size

    37KB

  • MD5

    2924f9d49b53f4094593c47351497b1d

  • SHA1

    8aa703f2991a30004bac9cbbef7703c732001b24

  • SHA256

    a5c1a756a1656c1743b75a1dec6610562f19f822a2f047ba322fd3d1ffc2762f

  • SHA512

    600d177e888751eb22b1dd243516f79305ef10186ea82d00246ab1799b4103b781c7404fec446c223f1e5d0ea69865a9e1316967f0e4b08b2e9be127cac1f907

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9q:qDdFJy3QMOtEvwDpjjWMl7T5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_2924f9d49b53f4094593c47351497b1d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections