General

  • Target

    2024-04-29_915174bfa9234754aeb7e3fc5f6e2a8d_cryptolocker

  • Size

    38KB

  • MD5

    915174bfa9234754aeb7e3fc5f6e2a8d

  • SHA1

    af8b59935575cac5ad89c17659e5cfdd0056e4bc

  • SHA256

    ae7df12a26c4fde678064dcc65b7dcabe569a21c3db0518383bc34b884e78d28

  • SHA512

    9fa15ee26d3e1da6eac943a1929870b211486f0af693921f918d945f096fdf80559fa2394f6aad3614cc8a5bc9ff99184e3dd02caa28405ec3cc1d72f8782c6f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9Q:qDdFJy3QMOtEvwDpjjWMl7Tn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_915174bfa9234754aeb7e3fc5f6e2a8d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections