General

  • Target

    2024-05-03_0cb1eee1f5e4d5cb66dab2be043cfeaf_cryptolocker

  • Size

    39KB

  • MD5

    0cb1eee1f5e4d5cb66dab2be043cfeaf

  • SHA1

    d7a6a417b6a311e980ab82bffc7a107f9e922cc5

  • SHA256

    315233c0ae83cdf4d00d02487d3192e90128309604cc0f96102a9f2e779ebc03

  • SHA512

    318b6bc2a1c9861bbad1c8d3c9e61d924b7d7f1daddd4fb32605b1c1f05a18639a935754f5cdc6200833bf5e3ed0ed1028c390e24f391b08958b7de02fcce6a8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY99:qDdFJy3QMOtEvwDpjjWMl7TO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_0cb1eee1f5e4d5cb66dab2be043cfeaf_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections