General

  • Target

    2024-04-19_1e63747f0d94b8e31a14fbc69c0e3ad3_cryptolocker

  • Size

    96KB

  • MD5

    1e63747f0d94b8e31a14fbc69c0e3ad3

  • SHA1

    9f225f1878432a2f8847ed8c88c9aefcf9e892d1

  • SHA256

    d44e716f8d3163324d11e19e0349fdb710ebae0f395574392c2a9e342c59dca1

  • SHA512

    cceff7d3eea80de7571b869b00cd0a8f463d310c98129b8330e4fb82534915cd3807528a724391ab1071f4f33558d55ab47dc36be190c6d388e162ac6710eac0

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYy9P:AnBdOOtEvwDpj6ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_1e63747f0d94b8e31a14fbc69c0e3ad3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections