General

  • Target

    2024-04-30_98aa440dea6ef6b18b28db282431a376_cryptolocker

  • Size

    90KB

  • MD5

    98aa440dea6ef6b18b28db282431a376

  • SHA1

    f9e7425a2e8774b519d7c210de6d321c6ccd2c53

  • SHA256

    cddd86214c1e5b50f2c16a76ee7747fe1e2cd45effaa478d947cd7ea867f9c3b

  • SHA512

    b3354eb52e4bd08d73059d36491922f45f9172a3831f9e05c052af307192a30b91f311917440983fe5fbaafcdf68bedd6694f89e2e7777e113d6aa0a9a606be8

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgddM:AnBdOOtEvwDpj6zY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_98aa440dea6ef6b18b28db282431a376_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections