General

  • Target

    2024-04-30_3e37d919dc7355b39c73cf80d67ee061_cryptolocker

  • Size

    38KB

  • MD5

    3e37d919dc7355b39c73cf80d67ee061

  • SHA1

    bc1489a50341cd77958f73f6e37b2da55638d910

  • SHA256

    2aed6f14692eef0e28f3ae97975b3561836ce60d8ad00ed9bfe27b88f98521a5

  • SHA512

    9f66fb63cde1b026eb32bc8730d66db8a12caa359ce073f70dcec7bf84e5f2937082f0bbf9d507be6c01738c0de7f2050b56cf9174e44b2f899032ae27885f25

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYjl:qDdFJy3QMOtEvwDpjjWMl7Tkl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_3e37d919dc7355b39c73cf80d67ee061_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections