General

  • Target

    2024-04-16_73f015c20b79ad04a359577b54578f95_cryptolocker

  • Size

    67KB

  • MD5

    73f015c20b79ad04a359577b54578f95

  • SHA1

    67551c431c5ef222bc05a027beaf1312aff58fb3

  • SHA256

    2726606f644b4beff71b8bff7d9933456a8e2db31469fac18c0d87e071e96667

  • SHA512

    b48e9acd2db61bf57aed27beefa3a8fb72b9971a7e117cc5e17597696d0fbdf6dda0d473bf1195ba6bb697eae5751a00e7e1c8e0e27f51d72f0fc53fcad3a8ec

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PG:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_73f015c20b79ad04a359577b54578f95_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections