General

  • Target

    2024-04-28_9bcfeeb3db06dade2141f6d66127d0b4_cryptolocker

  • Size

    38KB

  • MD5

    9bcfeeb3db06dade2141f6d66127d0b4

  • SHA1

    839cf17461a86de8d0045a5f69b23ffbaefdcc2b

  • SHA256

    d4f9ac56d1772fc5f3d76d4d7320e9b3042f365ecb9142c4abf0f4dd54e47c73

  • SHA512

    3ebd0c8187799119701fdeea006ccd0b058265c2c4921ad49b6db5a967f7c1fffdb9b6ce41bc87e21b7c754af5f430e9e00b82ca6908aeb79972f862fbef6486

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYU:qDdFJy3QMOtEvwDpjjWMl7Tx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_9bcfeeb3db06dade2141f6d66127d0b4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections