General

  • Target

    2024-04-29_bb5e242b2f9785f83e3a286857b681b9_cryptolocker

  • Size

    38KB

  • MD5

    bb5e242b2f9785f83e3a286857b681b9

  • SHA1

    0e7cb85e1b71c2a6c662328f8e2641ac674d71c9

  • SHA256

    32ff6d658872cf8a58dcc269bf130aaa7e9fe725ca54fb6cd490242e74d1f2c8

  • SHA512

    9111c848ebc8758a9eb706a443ff675c2cbaf6a6a6bce5cfb6c82ed6312cd0657d268ecc3b5b301e7ccfa95338472f55c4d3b7f0fa7b308e8629f4597888d8f4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYx:qDdFJy3QMOtEvwDpjjWMl7TU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_bb5e242b2f9785f83e3a286857b681b9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections