General

  • Target

    2024-05-04_dd38a6e88b4b51c5bb4691dac1d1e4bc_cryptolocker

  • Size

    72KB

  • MD5

    dd38a6e88b4b51c5bb4691dac1d1e4bc

  • SHA1

    67952911bac0ec12abbfa161248ff99c8ec60706

  • SHA256

    c7730520cf50aa7a1d5d74ff02c747cfa0034e100ce6aed8a931820401e92cc5

  • SHA512

    3961a58bfefc38b04bd1a3411947b49cf6114fccf5d08634a652d5f5c7549e71c41aeeee9bf6ff061f876e92b10e2a1f38bea3a599475e88d2902cf291204976

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9x:C4Q2c94OtEvwDpj4H8zA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_dd38a6e88b4b51c5bb4691dac1d1e4bc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections