General

  • Target

    2024-04-30_8012b3ccb37629be66376745aad4001c_cryptolocker

  • Size

    50KB

  • MD5

    8012b3ccb37629be66376745aad4001c

  • SHA1

    61df5f6a379be0b88b4870b750eacd7f6062ab7d

  • SHA256

    9f0b4ebb6fb9ef6b465711fdc3343f32a8a17193b294f01d1fefc71061285cf8

  • SHA512

    84e262951967a7f0e8249e49ad179eca8189ae058c1f4fd5b1603abc7764f88b36a34bfc8cd081b615e3d577843563786bdead5ab03b637a1ffa2893a6920b9f

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWLJ:m4Q2ckzIOtEvwDpj4HYZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_8012b3ccb37629be66376745aad4001c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections