General

  • Target

    2024-05-01_1e6a86f20334066a502431b731884ef0_cryptolocker

  • Size

    50KB

  • MD5

    1e6a86f20334066a502431b731884ef0

  • SHA1

    57d3a1c045e1f6fc573322e62fb1e592e2eff790

  • SHA256

    5f3399adf090f6c691cd39f18823825486bcdc29828349fc7ce1bd166465a47e

  • SHA512

    af1f4b9144ed9375228f960ad5c0fdf2564c6912abc78c7878c6aae806290ac085536e778b2afbcb75087f04c96a7ed44821ac9014b8f118c1d45a55cb22ef80

  • SSDEEP

    1536:nP+4zs2cPszL3MOtEvwDpj4Hy7B3g9CWuAxWLQU:m4Q2ckzIOtEvwDpj4HY7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_1e6a86f20334066a502431b731884ef0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections