General

  • Target

    2024-04-17_42f5f984227e2b147fe036189f9ecaf7_cryptolocker

  • Size

    37KB

  • MD5

    42f5f984227e2b147fe036189f9ecaf7

  • SHA1

    6e7c2393c9d200f621a9d298b1ee0380fb094e7d

  • SHA256

    f9655448105eda2e66e5b425749cbd9fc0ee39655c3a20b33793890cba2b25b1

  • SHA512

    82ac407745a3e76f76d95cd6ad0b9c230d06f5bf388a7ba42f906adbae4414743cb587b9c7c7231ef36d069c93f85276fc082d8ea5fd2d21164609d3d92dd43f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB2:qDdFJy3QMOtEvwDpjjWMl7TdM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_42f5f984227e2b147fe036189f9ecaf7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections