General

  • Target

    2024-04-24_4a042e93268fda25985a4db7b31f1aff_cryptolocker

  • Size

    67KB

  • MD5

    4a042e93268fda25985a4db7b31f1aff

  • SHA1

    c7add0c6782e335207df9f3c9b56a8f199d609ba

  • SHA256

    d7e5a2a85d61fcaf60ce85ebd0147427ae662b71981fd354762986c6aeb687c8

  • SHA512

    029b86de982320af441b6d0baf88b385add12d105c930c7859e65f39e28069ea306820aefd2df751fa3cfb1eeba8dcc62d29065db954827507f8cd8b1f13ba26

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pb:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_4a042e93268fda25985a4db7b31f1aff_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections