General

  • Target

    2024-05-04_cc848f58cff95fdda0f44fe9a15af87d_cryptolocker

  • Size

    72KB

  • MD5

    cc848f58cff95fdda0f44fe9a15af87d

  • SHA1

    a079bb19ec6d364a70e245b2be0b0ef73443b598

  • SHA256

    dfe8947083117e1abd2b81045d9ae67d9f4248e685555d97ec967d6bda8963e3

  • SHA512

    4e7482b96cca9661663f59e67c482e7f3b2e96a34719acf240cab65992237dc8fd1feabb35d20d60a774f4c55a5acf5aafb36700f7f5ca8c60f0de5921fc6043

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9J:C4Q2c94OtEvwDpj4H8zw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_cc848f58cff95fdda0f44fe9a15af87d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections