General

  • Target

    2024-05-04_d06aef65304a87e5d3389a41c173face_cryptolocker

  • Size

    38KB

  • MD5

    d06aef65304a87e5d3389a41c173face

  • SHA1

    6b3d362733474aeafe7dcefe20587f0653267969

  • SHA256

    2efc16345de84c6075b0a16ef0c7bb4bd1ac4c049c8b8b7a2a9f78ce58866478

  • SHA512

    f5a37215dc1f6f9edb1bcdc2386c3877ad9fc6db9a9d1844ba6e301f8d4b07b4a583f9e663c441e101752d725a038eee1343788b2a6e75f7260ed6c1f8f2df3c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9pD:qDdFJy3QMOtEvwDpjjWMl7T8D

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_d06aef65304a87e5d3389a41c173face_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections