General

  • Target

    2024-04-24_6f33d0b4be832415fed15f2b9bdbc0a9_cryptolocker

  • Size

    38KB

  • MD5

    6f33d0b4be832415fed15f2b9bdbc0a9

  • SHA1

    c76117ebb1121d68062809b89fc3f531a54154dd

  • SHA256

    854a2e3a726270153ed401f445257a5ead5ad637cf89507c1e7a9fe9d27ce0c1

  • SHA512

    0d061c8b753e75aed79c755f8f294b2dda6bc984552c59150ef7fcd6b12750d51e89b62388a768a9721d1badc0f6840ac0fc8fb061f2ef9cdccdecb0034b6bf1

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYW:qDdFJy3QMOtEvwDpjjWMl7TH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_6f33d0b4be832415fed15f2b9bdbc0a9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections