General

  • Target

    2024-04-21_c18599f8b303c0166722463ed84e9a95_cryptolocker

  • Size

    38KB

  • MD5

    c18599f8b303c0166722463ed84e9a95

  • SHA1

    b1dead3c4c6def0e48a61a2f65174d4bfa7ca5a0

  • SHA256

    7f0552f41aed26f12ad0ba439e34320a6c5a7d11b3cb5b2dc295c698a26b8344

  • SHA512

    e9dc0246a308fac8485fcf0ad275a7ca403b60cdeef5f0073afd067d56707d0f99c8516451e42fd202df7c4152bc889ac72c6f742a9e20a850cc987ec8baf03f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9u:qDdFJy3QMOtEvwDpjjWMl7Tl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_c18599f8b303c0166722463ed84e9a95_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections