General

  • Target

    2024-05-02_de164b0f44f27198a2062f767e70370b_cryptolocker

  • Size

    71KB

  • MD5

    de164b0f44f27198a2062f767e70370b

  • SHA1

    a4ef3f111174b81a985e74738c2e8ec9d2e32557

  • SHA256

    146f9843d1651c19451627619798ecd9b43448fd35f29242c83267f28224f02e

  • SHA512

    cedb8213a31a6cd939d8807b5002170bd4ee022cac16385d7bb557f509db0f2cecba0b1adc0f567a28c10cf26681143ffaf1656c218bd5950940d65b55706fb1

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95J:C4Q2c94OtEvwDpj4H8zS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_de164b0f44f27198a2062f767e70370b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections