General

  • Target

    2024-04-27_485e708f3f47f091edd270cc8bd2e8d9_cryptolocker

  • Size

    87KB

  • MD5

    485e708f3f47f091edd270cc8bd2e8d9

  • SHA1

    04154bdb6a8eff3de066dfc9f2d3581d188d2cbf

  • SHA256

    b87cac0fb9657c5a04bb8a9f1f1da74953e733e4b6c4367198e81926b11d2cc3

  • SHA512

    0d0c938e7c37d9fcd8f69ed78f0907270ad1f6493ad827801aedc7958325a82a4e86e0564e55c095b590ed11a855a82a9e46adc4dfabbe1687e9aff08a1a5c8c

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODJ:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_485e708f3f47f091edd270cc8bd2e8d9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections