General

  • Target

    2024-05-02_cd3a8a40be4e3ce7b956ec7a4ad3d185_cryptolocker

  • Size

    38KB

  • MD5

    cd3a8a40be4e3ce7b956ec7a4ad3d185

  • SHA1

    046b4b389d2600d7f6ffc9c904ecf4a7e42a1b41

  • SHA256

    fae4e886f11faddcd834c88c8b6d6e574646f37cd7edf01f0bda3526d6adf2cc

  • SHA512

    0007d083bd7eaa4475613f169ddeaabddd21444e39145b2535e8a88faebb2b8d4bb0b78db7b89f9e1a92a46948047528acc9203c6bf2a0028cabc9a7d0922f36

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan8q:qDdFJy3QMOtEvwDpjjWMl7Tdn8q

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_cd3a8a40be4e3ce7b956ec7a4ad3d185_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections