General

  • Target

    2024-04-25_2a478b32a946305ea09251e53fe396b6_cryptolocker

  • Size

    38KB

  • MD5

    2a478b32a946305ea09251e53fe396b6

  • SHA1

    a0bba84878d158f0fc41dd81869db70e88dd6612

  • SHA256

    618ef0fd2763826c6dbadbcf220a0fc99779ba0873d8bfddbea9305d6bda83cc

  • SHA512

    b8658978497b078e905029015182d995b765129f2abea83baba73a537ed119aa4b3138963ec553a41b14788126f8ab4a2b9ea8e1f95b9a101dc59a4742c31183

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaU7:qDdFJy3QMOtEvwDpjjWMl7TdaU7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_2a478b32a946305ea09251e53fe396b6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections