General

  • Target

    2024-06-04_25df1678d7ccc75e6a52a62280de60dc_cryptolocker

  • Size

    71KB

  • MD5

    25df1678d7ccc75e6a52a62280de60dc

  • SHA1

    f4644e85599a39921a9ad9e7e9731d457856f4ed

  • SHA256

    4b3bd248c71ce69a6ea0a5f3ca2fc16527e5046866ca4e8dd0418859974ee2f2

  • SHA512

    402883a133a944ad78bfa2076cf9bba7f2339c18a59d8316b0ef72dfff176cd30451f918a2a8ccfbd628f9875bd6ce150df0b170906ccd050d5e882555dbdaed

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9Hj:C4Q2c94OtEvwDpj4H8zG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_25df1678d7ccc75e6a52a62280de60dc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections