General

  • Target

    2024-04-28_55c5d72e3e53bd3f8c2dd6fdf4e0d645_cryptolocker

  • Size

    38KB

  • MD5

    55c5d72e3e53bd3f8c2dd6fdf4e0d645

  • SHA1

    407e617a7f8b5309fb4b78bb5f937a60341fd395

  • SHA256

    14da7ece951eaee1a1460281a33013202211232dcb8b09ea29aa095e6e70c431

  • SHA512

    1cdb5f4aeebccc6d00480901ccd427ea33b476b8c33824139b218608d001a4ba76cac4c5cb976e1e6bece4d24c28d1a9a39cc1d499812abbb0f81de344101abd

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabH:qDdFJy3QMOtEvwDpjjWMl7Tdb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_55c5d72e3e53bd3f8c2dd6fdf4e0d645_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections