General

  • Target

    2024-04-21_324cd272480fc38ece2bb14d38035fb8_cryptolocker

  • Size

    38KB

  • MD5

    324cd272480fc38ece2bb14d38035fb8

  • SHA1

    4de7f179b0a9bcc8d37931c3380e12f46bac0306

  • SHA256

    0ae5959e71a626004dcb6c1c3a2115f3ae0011c6c51427dc027d9b304885796f

  • SHA512

    f0bc915861d460898d75219c61d982089a31d472ce70f4b1c78d5d85a323699777cec0900d0407f53e72f6f534a7167f6affe0cd0935c5d69a3f301ea1a42387

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYal:qDdFJy3QMOtEvwDpjjWMl7Tdl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_324cd272480fc38ece2bb14d38035fb8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections