General

  • Target

    2024-05-01_8b08425322c3bde42c136681830e0048_cryptolocker

  • Size

    68KB

  • MD5

    8b08425322c3bde42c136681830e0048

  • SHA1

    8f8702727eedfe414e9e9f9c485d5810f2c79049

  • SHA256

    522d3e2c7486593f3b60f85583ecdd8fd1954f78a81142a11afe1c1142e4291b

  • SHA512

    29611eb14a674bad2fd2648392f04655267eb8e43017f2be9c0cb5217fb9f6390fb554ec9b0938f13ff4e9661f16eaf333b69508716d8e56758dffd45e7d6b33

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P8:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_8b08425322c3bde42c136681830e0048_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections