General

  • Target

    2024-04-27_78a1e5f2a495c4d97eb50214a1478781_cryptolocker

  • Size

    38KB

  • MD5

    78a1e5f2a495c4d97eb50214a1478781

  • SHA1

    aaaf35d10ea27aeaaf9f37a7c18d71f321578020

  • SHA256

    e36f5996128e152ce3ad872d4ac94cd4fb0fe91cb1e0d12a2a6c1c7588c55d47

  • SHA512

    5369ba23419ecafe2544c1769eecfe9edf35dae6c448ab1668b45c899c346192398902102d91965f4e63bc280a6ec66bded297c18b9cc97911d739759413bcea

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYk:qDdFJy3QMOtEvwDpjjWMl7Th

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_78a1e5f2a495c4d97eb50214a1478781_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections