General

  • Target

    2024-04-20_40434d9126d558c8459e0696876bfa6e_cryptolocker

  • Size

    102KB

  • MD5

    40434d9126d558c8459e0696876bfa6e

  • SHA1

    f58998974d86a687fda8058569185496845c5811

  • SHA256

    5a9c2c88210993d18866d1b5cca32ce6ed94856941547286e6f2f2b6b2d74df9

  • SHA512

    f3db7f92fc407994ff847279d1918f8440c58a1c430d3daf4ebf907154ab0158ef98ffb2ea0dc44fcd3595988f11c351db3ee9453e8d6c0d3488d0780d18ffea

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBS:AnBdOOtEvwDpj6zp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-20_40434d9126d558c8459e0696876bfa6e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections