General

  • Target

    2024-04-18_63e18a94e1cda8a7a5595439dd191c62_cryptolocker

  • Size

    37KB

  • MD5

    63e18a94e1cda8a7a5595439dd191c62

  • SHA1

    2d236929f8ebe0d4eeddef3336feb8419b7e9275

  • SHA256

    e913320a8b74b09d836e634cbaf502d8c686a8955f229e08dc675202b4ae8a7a

  • SHA512

    5f4d01ae0424b28fe03b26ece0225366b65571ab54b42ae2dcb47ba7c8c5d983dae9b7e6587eb22bd81f52570eeb729d888d14cdfcfe3b70c714143a8d17fc6c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB+:qDdFJy3QMOtEvwDpjjWMl7Tdk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_63e18a94e1cda8a7a5595439dd191c62_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections