General

  • Target

    2024-05-04_63decd42a273b34948defb3947014d95_cryptolocker

  • Size

    101KB

  • MD5

    63decd42a273b34948defb3947014d95

  • SHA1

    3ff49c3b08b049d113c276dc3da36950c710df00

  • SHA256

    c54d710e9147abd2ad2fbedccf0ca825964265e4a50056e66de86f123336823b

  • SHA512

    116ebc9d5f4bd4a9e21818d2697aca0f22879893239986f674d6fa37e27ce7131212cc5a445936cbc939d387c4ae6eedbde77e4f54a4ebfd2e0b44c9fb4e6de6

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviPeBR:AnBdOOtEvwDpj6zC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_63decd42a273b34948defb3947014d95_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections