General

  • Target

    2024-04-25_ea5ae21875548f5d72571f0024607f77_cryptolocker

  • Size

    38KB

  • MD5

    ea5ae21875548f5d72571f0024607f77

  • SHA1

    e31a598a509be42309ca914a2cedea133d756b04

  • SHA256

    dbf72d25d130a8003e0d0743a85bb544a0efa7e637225b0b6ce290ec392e58ca

  • SHA512

    dce29da5c6dad68de0fe5231e3caa60771c3a14297bb38e5f86d2d452b1298965c4839ecf0a58a4c33c7720d2c4da796cdda23f4808226ad77e6909fe674e401

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB5:qDdFJy3QMOtEvwDpjjWMl7Tdv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_ea5ae21875548f5d72571f0024607f77_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections