General

  • Target

    2024-04-25_f16d147efd818bdd47f19f11dae07cc6_cryptolocker

  • Size

    37KB

  • MD5

    f16d147efd818bdd47f19f11dae07cc6

  • SHA1

    b22af3938ac733286e6231a20bd6f6a065c3fc3b

  • SHA256

    bde1d1283a0ba57e2b9028d1cd65b38991382580298de94858e0046915ebbf7d

  • SHA512

    de41878b77cfb2e8358d23b9b5f0da9cb3f96784951eaea938f0475bd1751177156b657b2d03157c1c6021a0a52343ebb6dcf10a7b94fcc210f2bf27d93c46b5

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5ax+NET8:qUmnpomddpMOtEvwDpjjaYapT8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_f16d147efd818bdd47f19f11dae07cc6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections