General

  • Target

    2024-04-27_452fb05594a137ec04667c17acd31c7d_cryptolocker

  • Size

    38KB

  • MD5

    452fb05594a137ec04667c17acd31c7d

  • SHA1

    c42aafce753a4ca90ea97d7d7a93895fe871d42b

  • SHA256

    c0a4f5faa2f7035f130276fe0b6635f8bf1f483e096a12e81b8a11ecf5fce709

  • SHA512

    9a93112ff81850c142f584a76a82801b0e0f616c47db2bb3decfa7f22c7ed2aa30f5228dd1db0f8b787fee8f9f54504ddf32a9086ff00609f606a339aad4ed4f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan/e:qDdFJy3QMOtEvwDpjjWMl7Tdn/e

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_452fb05594a137ec04667c17acd31c7d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections