General

  • Target

    2024-04-28_532c9c2c622cbf58384514ca967f531b_cryptolocker

  • Size

    38KB

  • MD5

    532c9c2c622cbf58384514ca967f531b

  • SHA1

    b2d5af875dd69bac51e616eaf13f9bb8ef708658

  • SHA256

    26cfc25488ab3f871d47d8c4668155bc5456db7786f9e6191e2675e1e7df5c11

  • SHA512

    76e4a74e05fe14a5e70a3c6e62b59bf041a706b7230db4e7c4093cba353f71fd85ec4eb4841ecc74b4e166329f82534686b4fc0a698785426392297cec1703ed

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBY:qDdFJy3QMOtEvwDpjjWMl7Td6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_532c9c2c622cbf58384514ca967f531b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections