General

  • Target

    2024-04-18_dafb485e4364a93fda8e5368bb3141fe_cryptolocker

  • Size

    36KB

  • MD5

    dafb485e4364a93fda8e5368bb3141fe

  • SHA1

    040208988f3ef385224f74c2d6d501650be4a05e

  • SHA256

    3e4e7e780eec2c8e570d23a938c492a96e319172f9f237ca6efb1cb156cc91a6

  • SHA512

    8f17a22d42e5d9b16dcd6732c7211957ab058ff977f9dc969d253cf1be7b5f3b244079d79d7ed62746f0cf3945eba92f83852919832b3b93ce84773d80816ee3

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+NEg:qUmnpomddpMOtEvwDpjjaYapg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_dafb485e4364a93fda8e5368bb3141fe_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections