General

  • Target

    2024-04-29_c9ea80b0ffdaba59691d1ad070ed0917_cryptolocker

  • Size

    38KB

  • MD5

    c9ea80b0ffdaba59691d1ad070ed0917

  • SHA1

    c95d96dbc0fe506c1327ac4d1ad34063cce2fb6e

  • SHA256

    21b611e9f15374d34f08d65ef24e1f5f3ad52c1e94427f6aeea81dc2c6e9a41f

  • SHA512

    eda2468139b72d8ec73d7464e17a9608eee35cff50ddff8675a4d0bef1b43bab41b41cf46149cf3efa798a2afd65bab3e3fc78aa1810692e26caca0aba9cdf1c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYanZ:qDdFJy3QMOtEvwDpjjWMl7TdnZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_c9ea80b0ffdaba59691d1ad070ed0917_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections