General

  • Target

    2024-04-24_948a7afd27f12bacc770fff70e396ee3_cryptolocker

  • Size

    36KB

  • MD5

    948a7afd27f12bacc770fff70e396ee3

  • SHA1

    dc6d3097173ab0f4df75e0c546fea8ae448598e0

  • SHA256

    995a9818085ef4db7d7b5fe5884ceab47c31c44c7a502644a08dce785b4aee96

  • SHA512

    5dbb518ef3fa7133a299d1c09e6a6e7a702f0be1b5f1ea961f8b653f713ef33a96f0c0e8dcacc43efccd77e8aabf3af80f00b0da0a4fea6d24132275c6f95cdc

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWv:qTJu9cvMOtEvwDpjppVXzv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_948a7afd27f12bacc770fff70e396ee3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections