General

  • Target

    2024-04-22_de4ff856df05aa790462cbdf01999b24_cryptolocker

  • Size

    38KB

  • MD5

    de4ff856df05aa790462cbdf01999b24

  • SHA1

    2332db125173aefd078b176a96841227390472f7

  • SHA256

    bcdf95023fed9d379063950f8f3cbcf7ce4f82dc30bd9ee3aa0856ebd2acbd00

  • SHA512

    f6d866fe54f2a3aa1758e63f007576202ee0d7ef8bf366a9ee2b9e2b7438591b01619066479009991015b7e1ab98136d7af649005ce7a4ac2680c478d13a1773

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYanj:qDdFJy3QMOtEvwDpjjWMl7Tdnj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_de4ff856df05aa790462cbdf01999b24_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections