General

  • Target

    2024-04-24_8a96848e0969e4b67f77d034fb4d3bc3_cryptolocker

  • Size

    38KB

  • MD5

    8a96848e0969e4b67f77d034fb4d3bc3

  • SHA1

    8a05d792d759dc571c34bc3df791b2d958690045

  • SHA256

    fba97294bcb62384df7740b26b2fd8f7171b29194796df67ce9db34ebe03b19f

  • SHA512

    baccc1de6d083660516692863f0d59629d2845e195853d35ae4bfc92b20e5aba875a6f2c191343ab0a479bea06404478a34bbe51980b289eb7f3f285e2290a3f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaU4:qDdFJy3QMOtEvwDpjjWMl7Tdx4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_8a96848e0969e4b67f77d034fb4d3bc3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections