General

  • Target

    2024-04-26_1b59041091e4650de34007009c996b82_cryptolocker

  • Size

    68KB

  • MD5

    1b59041091e4650de34007009c996b82

  • SHA1

    a93c7ef9561f1c63355d8b97418ca45a9fb20656

  • SHA256

    380d4db785352fa2b78e56e33fb0dd4853cb5053e4d8a391662dddd4214213ef

  • SHA512

    e9f4a04878d39834313580d06aa438a9757a9647e3af5e577f797d95f2a436fb3818fa6c1ac9bef2d095b9192ce2183aa76c0a266a5ec664ffa153f6e7494e73

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PO:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_1b59041091e4650de34007009c996b82_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections