General

  • Target

    2024-04-24_a1e923ef342ac7de87a2e79bc2de72db_cryptolocker

  • Size

    68KB

  • MD5

    a1e923ef342ac7de87a2e79bc2de72db

  • SHA1

    273702c3242d8a1c934f6e320d9955ca6a27370e

  • SHA256

    a4f0e75dbb3478fb49866e7f9a2dc8e178c2b9c6091cf960cf371157164d4866

  • SHA512

    f81a5d7f4c8d6ab7a73510236afe0442b88f2eb349c906eb419c99872402f49b5dca30db6e7d8e9f90409188b23350ae501338355e4d79cba64bf515f14fd6b2

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQApu:78SEOtEvwDpjWYvQd2Pc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_a1e923ef342ac7de87a2e79bc2de72db_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections