General

  • Target

    2024-04-16_78f7d72069690d9340aa63f85dd66c48_cryptolocker

  • Size

    86KB

  • MD5

    78f7d72069690d9340aa63f85dd66c48

  • SHA1

    c12d1b64d061055041d13a9e261d2c2749764b89

  • SHA256

    b720fe46d1f4a6ec15e88bdbb13d7c548d68961a50ad1244e22476e060c1d798

  • SHA512

    4a4310004709b402c6a83bd26ab1e345637ca75889a0573acbd07164d61abc7949a05e00975a7ac48cc9f0d2cf59f01ec216c4b32b00488095690550525a3eae

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIOe:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_78f7d72069690d9340aa63f85dd66c48_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections