General

  • Target

    2024-04-28_489b10055cfd18206f08960b66f7a677_cryptolocker

  • Size

    36KB

  • MD5

    489b10055cfd18206f08960b66f7a677

  • SHA1

    a36064fd4970aab4b4f591705c9b719aa9f6842b

  • SHA256

    dcc2c3ca8740f45f96845c412bbf194126f29955f4d3f5bf5ca4dcfef9b54f09

  • SHA512

    864f21070d39d51581615415b0c24aa6362d77eb7786fafb34323a5eb8fd996c3898f34b1c90710d49b79180e1a3dad8cefdb5af96875c64f23c4737a463e71a

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPa:qTJu9cvMOtEvwDpjppVXP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_489b10055cfd18206f08960b66f7a677_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections