General

  • Target

    2024-04-25_d31296a8a57ad5401ea4f6b0d5277ef6_cryptolocker

  • Size

    36KB

  • MD5

    d31296a8a57ad5401ea4f6b0d5277ef6

  • SHA1

    9ea69bff209b99faec7f40b50770dd89ea9d567f

  • SHA256

    49ffcbfebddbaa336fd9693fd5cfe2f324ee14abf2c2e08e9e01dd8d03285d5e

  • SHA512

    a0e61db828ba453c52fcfff21bc178f665aadc46a9965ea0f186c29fcdec42e78fbd344cd65d41d69bfe2e5fad8299022d8114e72899b1514e0ddb44e6469cd7

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38:qUmnpomddpMOtEvwDpjjaYaQ8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_d31296a8a57ad5401ea4f6b0d5277ef6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections