General

  • Target

    2024-04-25_b1668f5d6d3884e84a819880340d5d72_cryptolocker

  • Size

    36KB

  • MD5

    b1668f5d6d3884e84a819880340d5d72

  • SHA1

    f8268700ebe41b94e1f8c82c32bb6f8d90a87c0a

  • SHA256

    a7380532f249e94ef5abdec0e3a566d0a302e17009e57bf8beeb41987dd0c2ca

  • SHA512

    2c2223ed81105a03bd3818fdfa852bc9414bf23310343c87a5d9f47de6472653aae878cabaaa8590665a30b62831535e52842539c44d7c9e79220eebfa50daeb

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPeL4:qTJu9cvMOtEvwDpjppVXjc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_b1668f5d6d3884e84a819880340d5d72_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections