General

  • Target

    2024-04-25_a4fc158ed0e7c042f22844da612a1a29_cryptolocker

  • Size

    39KB

  • MD5

    a4fc158ed0e7c042f22844da612a1a29

  • SHA1

    8b69137f6cd0e5f70d4330f90eaed1efa5bc7623

  • SHA256

    16d6f910b38a4fcc7fcb4ab55679105e3a610ffaa69093f7b961f3a8f67a9458

  • SHA512

    cbc87f85704dbc76bdd826b083b02c321b5c176dc2931591e5e962df5978af416843f3b1f0881c3804bbd5591c4f27e75db058f3ce0801e81356b6b3b7cdd45c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYak:qDdFJy3QMOtEvwDpjjWMl7Tdk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_a4fc158ed0e7c042f22844da612a1a29_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections