General

  • Target

    2024-04-24_bd67ffce3bb8139a69860760d4bd7a42_cryptolocker

  • Size

    70KB

  • MD5

    bd67ffce3bb8139a69860760d4bd7a42

  • SHA1

    d24fd2ca9fae4952581bd1f23e5498a3a84b5aab

  • SHA256

    130daa04cf95fb7bf7799b0665e5f00c2790f17d0dec2d8784dbb15e961068cc

  • SHA512

    2e8751ab28d6675c1d8b9c448db05ac24405fc4e6f9d7be818ead00fe3ed28cdffc880cf61288ec1686bfa46d52ed717f3c574da7faacf723f38298dda2b7471

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9w:C4Q2c94OtEvwDpj4H8zB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_bd67ffce3bb8139a69860760d4bd7a42_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections