General

  • Target

    2024-04-28_d31437d6311df0877eebb1d9d75491a1_cryptolocker

  • Size

    68KB

  • MD5

    d31437d6311df0877eebb1d9d75491a1

  • SHA1

    3e07ba6c41b954840d73662cd13107ec06ad80cf

  • SHA256

    54e79ac6d96d20ad75805dd45f1df8d80b46d0db730bd8a6b5f60764c5eaa23e

  • SHA512

    96f31684bd609f2fd04ebc67ba3b52a271cb1312cf17007d48fe029e8977fa3ce36f9d16939be8efe66c776cdc91828f8bdd63dd08cac1269148e1c03de32c2a

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pa:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAa

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_d31437d6311df0877eebb1d9d75491a1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections