General

  • Target

    2024-04-22_25c6cb6d46bba1c6327f8ac975bf3633_cryptolocker

  • Size

    37KB

  • MD5

    25c6cb6d46bba1c6327f8ac975bf3633

  • SHA1

    e182f980ba4e72302cc0b5c60c63fff0cb9f0f0f

  • SHA256

    2173209464b691e63927e0eca47dddb02fa366d4c55796b7a4ef50fe69ab8e9e

  • SHA512

    5e16ab91ac1bce5c3f2a2c7cb9ad9fd3667c410fcc592b5653a5650b5b725ec3d7ea936516523b7cfdf099d93fd7d474bef77a8adb2587441644d12e05b82d84

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBZ:qDdFJy3QMOtEvwDpjjWMl7Tdf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_25c6cb6d46bba1c6327f8ac975bf3633_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections