General

  • Target

    2024-04-27_dc3a8170c7fa9bf8b6413a859e746de4_cryptolocker

  • Size

    38KB

  • MD5

    dc3a8170c7fa9bf8b6413a859e746de4

  • SHA1

    2a47a34fd6d4eeb0461bc6a44f8420aa02b20853

  • SHA256

    8a1408c48b664214731e241f2a796252ae16e8f261f8ee2240cb4a7ec194ca7a

  • SHA512

    3b5559a2150197c6374755a64d0c0ba1c59e44c54d4e297f35d9f50a9a8055e2a731f6bedb461a32ef519b096b71ece52c43e5b5c6df172456a81ac28292e665

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9J:qDdFJy3QMOtEvwDpjjWMl7T6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_dc3a8170c7fa9bf8b6413a859e746de4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections