General

  • Target

    2024-04-28_0846c76232520d30d89e03a41a9873fa_cryptolocker

  • Size

    36KB

  • MD5

    0846c76232520d30d89e03a41a9873fa

  • SHA1

    39e765b068da3b0144b643c7cf9c0551c02779ae

  • SHA256

    725dacb21430d0f35013c1f8601e85b68c78d51575edbb2c3f34a7d7257ee5c8

  • SHA512

    3868978950a15f49d8ce71061e211ddebc3d4e243d4fa8d24ad8129d9d6033cb9e49f258534339b6a8b7953d4db5bb79c7e49b704c82583788708654bd4d7c46

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPc:qTJu9cvMOtEvwDpjppVXd

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_0846c76232520d30d89e03a41a9873fa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections