General

  • Target

    2024-04-17_25ee5ae9d185fd27ef2e93893c8a2422_cryptolocker

  • Size

    96KB

  • MD5

    25ee5ae9d185fd27ef2e93893c8a2422

  • SHA1

    d3904077a0c39511f9a98a1465687cc80c933c5c

  • SHA256

    1087401d20ea741f8e92b98b285f41d6f67df7cc63d58d27b429d5d46a4902b0

  • SHA512

    a3fb0f202f53a7763ce0614d901e41a497fb6930dd6ed25b97eeffededec0e1e4f0332df8ad87d82163c1cb5e0bf989098aa43feef58ce0d55fd457309031a91

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYy9j:AnBdOOtEvwDpj6zi

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_25ee5ae9d185fd27ef2e93893c8a2422_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections