General

  • Target

    2024-05-13_3a61448117204ba587ba41bc1ff52d72_cryptolocker

  • Size

    73KB

  • MD5

    3a61448117204ba587ba41bc1ff52d72

  • SHA1

    e01e6d3529a4cd2dc5ef6da0158ca873614dc12b

  • SHA256

    b33e9dced8674884280caf1a3dd9c0836c19960ee7d3ce14f6ecd5b61346b525

  • SHA512

    65885faac3f0c7b2b95442b8cb2ec03f9963dd7a3a01b5e66895a2903070e6c8e74de8c654992fd4d4f406c6c22233f174403e09d0dafec64d032e685e38ab28

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9VP:C4Q2c94OtEvwDpj4H8zU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_3a61448117204ba587ba41bc1ff52d72_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections