General

  • Target

    2024-04-19_efa3aca6b5e2ab71011a67b4b9784a48_cryptolocker

  • Size

    89KB

  • MD5

    efa3aca6b5e2ab71011a67b4b9784a48

  • SHA1

    57d044584229295ec3d250f9b334b78e09fee861

  • SHA256

    7276b5ea3eec9a4fb350f869eb9962e8cebe439cf48778af8676317ebcf9bc00

  • SHA512

    42fcaf1d872f14009b8499e425f2b88bd8ae15f2f7d1cd9f7096b3cf4b8e3fe8a707cf16ad20fa03dd6d1f47daec3a6cb1647e6850265590c1a54ec657a50765

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg6gr:AnBdOOtEvwDpj6zl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_efa3aca6b5e2ab71011a67b4b9784a48_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections