General

  • Target

    2024-04-16_17658ed12bc12a8a2f94331fdaa9288f_cryptolocker

  • Size

    38KB

  • MD5

    17658ed12bc12a8a2f94331fdaa9288f

  • SHA1

    d8c1c3d6c8ee07b9fa5f7cbf26e39e24a3239954

  • SHA256

    6af64b65b20fb3ad3c7a1ea7547658390c51b287e918c79b3b94a7bb68bfc1ab

  • SHA512

    4fbadf8c53dd1a5527abd873bf2bbd5fe7075bba0212fc70b24e0cf118202265cab5b73f1beb48d165b0b1b4cf847c90f6edd7759a668942ccf32b24a20a545c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYal:qDdFJy3QMOtEvwDpjjWMl7Tdl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_17658ed12bc12a8a2f94331fdaa9288f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections