General

  • Target

    2024-04-18_4395e5c9a30dc19bf39e41f8d2a8ca73_cryptolocker

  • Size

    128KB

  • MD5

    4395e5c9a30dc19bf39e41f8d2a8ca73

  • SHA1

    ad9a493ddad053b33b0ab99093dbd371368507f8

  • SHA256

    4e062dd0dc312e6ccb4be4e697d46b390caede8f9e6284e6b0d8b290500b2b69

  • SHA512

    90339f07f45f27bf0a75d60818fdc9d27ec5def1a0a8d55c943b1fb15b53ea96d419b6dbb1c9ec7adae66d9fc0c3680b2932a0604e289a980a8023aeb5d81f3d

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1ebHkWa:AnBdOOtEvwDpj6zS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_4395e5c9a30dc19bf39e41f8d2a8ca73_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections