General

  • Target

    2024-04-25_38c89b50d8a0c46c89f802be6e5e3e2f_cryptolocker

  • Size

    68KB

  • MD5

    38c89b50d8a0c46c89f802be6e5e3e2f

  • SHA1

    27451ceec39c18cfbe51777ee0d6df742ec28c36

  • SHA256

    4ded4c53c1dd94e15b17e1b99539fdb0aa9bc1b08aa332eb54e24e02506f9170

  • SHA512

    778550aa8d9ad77478ffc9edbcf773643d71a737a2a58f280d22db1fbbd4d0c49d829b7064322b37d2906b1e761b604ebfcbcb61f9ceff276fb4dd9e52c8b4c3

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQApn:78SEOtEvwDpjWYvQd2PZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_38c89b50d8a0c46c89f802be6e5e3e2f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections