General

  • Target

    2024-04-27_c678d9c4534ac537dc25fe30b958fa52_cryptolocker

  • Size

    38KB

  • MD5

    c678d9c4534ac537dc25fe30b958fa52

  • SHA1

    0067b0994600a2008d018494a4f8416531c1287f

  • SHA256

    4ea4565fb81abbd7ad1ea22014cb52f9fe400737cb732fbe9ced38dc1e484748

  • SHA512

    6320d8564b3b5ecad56f95a371a5fba1bd285cd823d22e37609ec9df5ba3f8b4392aae4440067a3e6f4de969297e5213e6042e4ffaaca30c7f3c2c90ed72503a

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabzI:qDdFJy3QMOtEvwDpjjWMl7Td4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_c678d9c4534ac537dc25fe30b958fa52_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections