General

  • Target

    2024-04-21_38d291e9b8411e12afe1e2f8fa7ce3f7_cryptolocker

  • Size

    38KB

  • MD5

    38d291e9b8411e12afe1e2f8fa7ce3f7

  • SHA1

    0751406c72a0d884c492c480f6e7f8f8b3e29995

  • SHA256

    1b83ccf725e9e147f6c1ac85303f153f5fc87686974e953f19cf2117ad5651fc

  • SHA512

    7ce13957e6b2f7aa34256bd22347ab0dedc7ad6032c942756360b46c4b5eb339a71916301b3c73b50191ec084ef39c89c0d13ef4dae62810b48aadc682864c20

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYk:qDdFJy3QMOtEvwDpjjWMl7TJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_38d291e9b8411e12afe1e2f8fa7ce3f7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections