General

  • Target

    2024-04-17_4427a8246e669abba81e7a4d72c0e29c_cryptolocker

  • Size

    67KB

  • MD5

    4427a8246e669abba81e7a4d72c0e29c

  • SHA1

    3197ee71eb88550cfc4c5c5e428a90fd7f2639e0

  • SHA256

    a176a30c414d90965a3584431bd3171370f9db36767886718314f44260e8b23f

  • SHA512

    296bd73fb99884895b5c4eef3c07623a247783f1555da5fdcf3fb5dbf31eae9dff38309580ec35507d0f6efbd0677936293fd302bf9a88df01f7596d8b2a88a3

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P7:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_4427a8246e669abba81e7a4d72c0e29c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections