General

  • Target

    2024-04-27_c5ac6a8d4ab94a6ea0bfb8569fd94406_cryptolocker

  • Size

    87KB

  • MD5

    c5ac6a8d4ab94a6ea0bfb8569fd94406

  • SHA1

    c79cbb53daaa37c7b1dcddabb9bb116fce421aa8

  • SHA256

    356d0bba3f1f252ba146ddd945569f4021a0e5b1ee57d10dcb4f44a85392f6b6

  • SHA512

    2fba06b1648270d5f7a80b3584accef23f039154e5770369e2bdd705d9e4577c7bef126dbe841f8fac73339c8ffb77b56e112c28074f4262f76502c0133edf51

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg50:AnBdOOtEvwDpj6za

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_c5ac6a8d4ab94a6ea0bfb8569fd94406_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections