General

  • Target

    2024-04-29_68d8b895d43f8de09ac9a5d10acec6dd_cryptolocker

  • Size

    38KB

  • MD5

    68d8b895d43f8de09ac9a5d10acec6dd

  • SHA1

    7756bcf1a62bbf760128b26064a6fe68c4aa1d30

  • SHA256

    16a1bbf9b2c9da1a779c803cfbac8b8a020b3f94c0b6a7d7e6478d2e0dcc665a

  • SHA512

    b9c3d821b30f6f5304e873aa4df6386aa27fe6b2b9a8a46050d5e424c395c94afd419f3ec9c15a98a43ad65d0532b41b6d3f4ce35fa059e9aaf4e3d8078d507f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY3:qDdFJy3QMOtEvwDpjjWMl7TW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_68d8b895d43f8de09ac9a5d10acec6dd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections