General

  • Target

    2024-04-25_bc88c2b7c60c1dcf7e3bed7c84d57e63_cryptolocker

  • Size

    67KB

  • MD5

    bc88c2b7c60c1dcf7e3bed7c84d57e63

  • SHA1

    dcef7d82da446001d2fbe295c7b053f486548ca5

  • SHA256

    e5b7fe2522998b9f5a6e1eef75dadc505f2c59ca2a8ba36c93fcf6008f539307

  • SHA512

    7ebcb27ac1fe0c306191fb4d709c56a3f6b9c023273ba9bad93167787be47c765516371db939332acd1a0418ac86e97beb12b513424dbfdaaf804be9d1b7208b

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PA:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_bc88c2b7c60c1dcf7e3bed7c84d57e63_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections