General

  • Target

    2024-04-25_5a262a2e63732a377b05700e898c5a0d_cryptolocker

  • Size

    38KB

  • MD5

    5a262a2e63732a377b05700e898c5a0d

  • SHA1

    982bdfa676a9751ade891f3a1050895efdf7f2b7

  • SHA256

    23a3f159b46e18ca988cf19e88067268194da5c872adf43e2e7a7578da97bc58

  • SHA512

    3cdd4133fec3295360eb483a448cb5664a154aafa436cea651fa2532edeea2866493f13dbd102d2f3556cbe6c9a54e623a9caf0628c0f560eca263539440a91b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBv:qDdFJy3QMOtEvwDpjjWMl7Tdp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_5a262a2e63732a377b05700e898c5a0d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections