General

  • Target

    2024-05-01_e3bc94cbca06050a723a60cb3b5c8f55_cryptolocker

  • Size

    38KB

  • MD5

    e3bc94cbca06050a723a60cb3b5c8f55

  • SHA1

    924d15b02c51a0b1e6fa281f73dd2dd0ea985970

  • SHA256

    d44ed6e77099163dcd4a01d4611d543c370ee5aca9b83f451367b14819229687

  • SHA512

    4bd711233a9c243fc20608b785dbf4d1b5ad1a3617dab33595287d4f9e3a103973f9562d9bd4f18c634e0c6581d049551bc17950aa6c4c7b6836311d9e8a25c8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaIK:qDdFJy3QMOtEvwDpjjWMl7Tdr

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_e3bc94cbca06050a723a60cb3b5c8f55_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections