General

  • Target

    2024-04-18_d3e580340986b6d58d3a74a277b7d771_cryptolocker

  • Size

    68KB

  • MD5

    d3e580340986b6d58d3a74a277b7d771

  • SHA1

    fa394bd2a0637ac5991c2bfeaceb1efa00d40e04

  • SHA256

    a9f4d7403af8aebc2b8e705e0ebb806cdb38c868b2625ec8a4bde98ccf7aa73f

  • SHA512

    b3e9ce63e89d95957012e01c7f0946042db7e2a71e8b4c78f9afc05e8d720a891c143c84f41e9c2ba4fe9cc1d6871368447644e4a9eda54700b46f7bd2bdd216

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P/:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_d3e580340986b6d58d3a74a277b7d771_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections