General

  • Target

    2024-04-21_580f7b18e38e4911e17658d63c0e86ae_cryptolocker

  • Size

    100KB

  • MD5

    580f7b18e38e4911e17658d63c0e86ae

  • SHA1

    4ce0bea54e178e063759571874320fb3a88821e9

  • SHA256

    9e72db81e7a61743e881a88bed1b0ccffb3d1d33c4292ba1a4dce6c0d0956a0b

  • SHA512

    363266e1258cb0178f3b273a806e28ddf62250d8a598c22149325e6546e41b3fc9bad2e2e8efcd5fe57ee27c6824b0d3b7aa1d02f9d32b06f73211e5ffd462ac

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBN2:AnBdOOtEvwDpj6zn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_580f7b18e38e4911e17658d63c0e86ae_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections