General

  • Target

    2024-05-02_f6cdbe994bc2e83d0098378da5e1920c_cryptolocker

  • Size

    39KB

  • MD5

    f6cdbe994bc2e83d0098378da5e1920c

  • SHA1

    c05dbda920543bd6102482a8d40191e059f32a29

  • SHA256

    a1ddd6347cd3d53907f6cca9153e51669e6ee8e82dfd43e8956b7bc4acae70f8

  • SHA512

    36b43e3439a8151824a6f8dee8f044e8e62e80219085d4b6f1986b68b347f5699926e46ae8e370e2842ee1120e496abce1b97ee8d297ab4fcf4dc29af22a8bae

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBT:qDdFJy3QMOtEvwDpjjWMl7Tdl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_f6cdbe994bc2e83d0098378da5e1920c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections