General

  • Target

    2024-05-03_17f94b35812e42cf169eeba8c16cda0c_cryptolocker

  • Size

    72KB

  • MD5

    17f94b35812e42cf169eeba8c16cda0c

  • SHA1

    925b92aa09a02299ca232f3b817ef7320f77ce67

  • SHA256

    7007f0bb85c05320e4ac8f03f3ebbd4eb579a1e746a2c7fa7cf2ec6b716d0b4b

  • SHA512

    f3e9f82ca8f662374d6dc245a91094541adc659fff3582cb63c4d8d9f12a10ee480ae8c68a16087b174ddd45a3f46c71c98a8d32e70ac4ef9df3df6421f7c48b

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9F:C4Q2c94OtEvwDpj4H8zc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_17f94b35812e42cf169eeba8c16cda0c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections