General

  • Target

    2024-04-28_03728a95ce905789e293da7ee5a0383b_cryptolocker

  • Size

    71KB

  • MD5

    03728a95ce905789e293da7ee5a0383b

  • SHA1

    22c004f050d2ea11a1edf82e46867389f54829a0

  • SHA256

    f927c0355168cb74c68a60fa9e60c2d4715e6802dc670215c4f6d6d7deb00719

  • SHA512

    6f645a219acb618658dd9b5bb24079b1ebba9a48d6b2eef827fd611a3fed5689da16b1e4c083b81d4f876776b5be4e54e191d4352c8a1620e86a2c729ddd9392

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9k:C4Q2c94OtEvwDpj4H8zV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_03728a95ce905789e293da7ee5a0383b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections