General

  • Target

    2024-04-29_0378cbd55556124b365fda28d886360a_cryptolocker

  • Size

    97KB

  • MD5

    0378cbd55556124b365fda28d886360a

  • SHA1

    9651efbbe04ee740cd970ee76f6d2682f0bddb34

  • SHA256

    ee72a9f59f13e245691cc86a2938e1bc5e697858a6b80958e7b148a37d13cc13

  • SHA512

    b148ec69d0ff51959fa5109ab9fae2d3f3add063d18da721813e5ab6bcd87cf1040c537a48a50113db0289afd3ddda145265b2fa7c8ea38c7c5da5cf85c8591f

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpYy98:AnBdOOtEvwDpj6zh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_0378cbd55556124b365fda28d886360a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections