General

  • Target

    2024-04-23_399bc05ef467cfa166ad2e41b2efa7e9_cryptolocker

  • Size

    38KB

  • MD5

    399bc05ef467cfa166ad2e41b2efa7e9

  • SHA1

    d0a0bdf203af335b42aec4a87d3e3f57477ca2f3

  • SHA256

    b42b21d80d7d5b378b08f26bf801f47b8d0c737495600582c5a38f5f88a895c7

  • SHA512

    4ab75ed8e385af6d034a697c88ef3bb2806e34183822d0b9652718adc5ac5e9036d0c9e9b98ae9484a8b52313b4777094d339af8e45cb6bf88c7645224886f54

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYO:qDdFJy3QMOtEvwDpjjWMl7T/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-23_399bc05ef467cfa166ad2e41b2efa7e9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections