General

  • Target

    2024-05-01_ceda78c8f40cdc109ba142508cf105f6_cryptolocker

  • Size

    38KB

  • MD5

    ceda78c8f40cdc109ba142508cf105f6

  • SHA1

    3d8ea49c6150ed0a24f2070ad9855c55ccba6d6b

  • SHA256

    580b6b5decdbc9f334f452452dd5b87a520d66c8c2f1dbb7ce74d9aa3c86ffb9

  • SHA512

    6ea23fb4807e33883b3738aff11cbc0825ecb18468d61934566453dd14af4db74727237ea6b2e6e9292baf7e08b93149a2482af537f0e20d60302f356bf36973

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan/E:qDdFJy3QMOtEvwDpjjWMl7Tdn/E

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_ceda78c8f40cdc109ba142508cf105f6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections