General

  • Target

    2024-04-28_3846afced5ad11ea08c25ad3a5d7cd34_cryptolocker

  • Size

    37KB

  • MD5

    3846afced5ad11ea08c25ad3a5d7cd34

  • SHA1

    d93aa7c52e7f282154b452dc6de95c84f99d4334

  • SHA256

    b9a71dd02b4ff6baabbc0e8d14a056c3ce962da842978074397ef55f705c292c

  • SHA512

    857c4c8e3265d83b0b008a673a99d8f518a51fd5b7d483f190164844cab430e90a4b672ae6a7b3c749b41655edb0c6ae80a12a9aa9cd5925c9d83c9d301b187d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB+:qDdFJy3QMOtEvwDpjjWMl7TdE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_3846afced5ad11ea08c25ad3a5d7cd34_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections