General

  • Target

    2024-04-20_d34ce6b103c0bebce7d659a47de80c56_cryptolocker

  • Size

    67KB

  • MD5

    d34ce6b103c0bebce7d659a47de80c56

  • SHA1

    5ede667b26c10750010fa248055248ef6ef7be8b

  • SHA256

    15eceb1fc32a9084cba4e2270b83587e862e83d6d922069de498d94a84e98737

  • SHA512

    8758ddd526c3dc04afbb726e56a39eb24977f9fa2750ecd212ed799559e4616f651ba059979bb31036384c3cf7f3d558e45ed20688e5bbacf7ebe457b3bf766a

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pe:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-20_d34ce6b103c0bebce7d659a47de80c56_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections