General

  • Target

    2024-04-25_1eb30198c923cfa6afe50c46e06a231f_cryptolocker

  • Size

    23KB

  • MD5

    1eb30198c923cfa6afe50c46e06a231f

  • SHA1

    f9a8a763f4c2157c627c480b2683b4cc8b1b0330

  • SHA256

    2d823d95c57d3c51bd80eb9f8abb74974e52f8841b0dbe40ffb0403d9aba6ef7

  • SHA512

    18cb1205318460d9d3db3aa05eb40b5ed7ea87c9dc8143d60eeaef3fcb692c2940922f1a99f8a3a132b899b368a6c2a6ab69741e3cbcdd6f223a5ac9875dbc97

  • SSDEEP

    384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HnDx:bVCPwFRo6CpwXFXSqQXfjAHDx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_1eb30198c923cfa6afe50c46e06a231f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections