General

  • Target

    2024-04-30_19c6af410b3f31420b79ffa07f6d88a4_cryptolocker

  • Size

    39KB

  • MD5

    19c6af410b3f31420b79ffa07f6d88a4

  • SHA1

    ffee1573059c7cd8d664e99f6a287d2a2d3536fe

  • SHA256

    0fd6050b69d3b2b7f1341c4a8c4cd62a3771fe1857526b643a2d68c40c0c46ef

  • SHA512

    4b19d5fc28fa0ba256523c87a16c4acde0b4ad4c711dc205c5f48358ae8342a6e2a4aedf7bd948d1943d7e19888fb93f75e5671775a20baf6ca708b7b4652771

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYa4D0:qDdFJy3QMOtEvwDpjjWMl7Tde0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_19c6af410b3f31420b79ffa07f6d88a4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections