General

  • Target

    2024-04-29_7ebdf0a7de7e3dae04ad968cf9615642_cryptolocker

  • Size

    87KB

  • MD5

    7ebdf0a7de7e3dae04ad968cf9615642

  • SHA1

    0e81ac3e6d1fdd1915d9c145e7494b6e80b79d16

  • SHA256

    85d353b25f04a41d2a45b4bf3c5b78e84e73491a9642cd62b0c5dcdd89f2fed0

  • SHA512

    e4057129a74c5695f15d872a11b8cec047eab81bf56c960844b35147260e0c7297a3d75ff4c54a8263953da59af4e9d3cd1521c21b7e8308cc75e51d8dcad179

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODZ:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_7ebdf0a7de7e3dae04ad968cf9615642_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections