General

  • Target

    2024-04-19_d81b729342304693648746fd656f1bc4_cryptolocker

  • Size

    69KB

  • MD5

    d81b729342304693648746fd656f1bc4

  • SHA1

    e42104744d6450972fd76b41573a67e0a0498d6d

  • SHA256

    6a242278bdf7de4b278c366f7a2dfb72a3d9b00cbca66c374836eb35683d8c33

  • SHA512

    34c24c39f5746f347b6d18a95fd466d6e14139a9785fea156ecc6509503a3c10d74b206616588bbf0c48403effac30405b0027a76633153a2bfa8a52e90f65b6

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9c:C4Q2c94OtEvwDpj4H8zV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_d81b729342304693648746fd656f1bc4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections