General

  • Target

    2024-04-21_421616d1d78c069d17f5d2874dd5ac7a_cryptolocker

  • Size

    87KB

  • MD5

    421616d1d78c069d17f5d2874dd5ac7a

  • SHA1

    197b6b5f278ac8218b91e391930adaca83867fc9

  • SHA256

    9d8199f24b137fa1ad8e92b7b98c7e3ec267ad6fe45fe7fba7bf12960f72e1dd

  • SHA512

    45170271a068131ead02fb6a347886418019d2f404d893e3e8cf98d1df938f8ac755b74218490dc42f0bcf0485a50fbb6c46eca366af3a5e158863c4c25f0719

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODX:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_421616d1d78c069d17f5d2874dd5ac7a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections