General

  • Target

    2024-05-01_9bb7d78d4e26cb21715a8f6bed4cee07_cryptolocker

  • Size

    39KB

  • MD5

    9bb7d78d4e26cb21715a8f6bed4cee07

  • SHA1

    f959b2af1aba63903bbfeb042549bf418d092c05

  • SHA256

    5a4ae65a2c9ae7a6bd69a715da607c1afe37b0590f879fe2c614cbd1338a09be

  • SHA512

    6280f98254590aab8caebbc2b1f201de6346e1070a11c09f0c1b39b473fd9fc2baa180d638594baf0df3c3c8a4a9e4365795bdae1f9813b45a4883a3ee698f64

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUK:qDdFJy3QMOtEvwDpjjWMl7TdaUK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_9bb7d78d4e26cb21715a8f6bed4cee07_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections