General

  • Target

    2024-05-05_b0dffa6c9865b26c812f5933741bca12_cryptolocker

  • Size

    37KB

  • MD5

    b0dffa6c9865b26c812f5933741bca12

  • SHA1

    1657cfed5a6c0e4f94acebe25c638603711a73fc

  • SHA256

    21f941ad637afa01a570a03ad07f98d8ddd68910f911b24ec5f39bdfdd663060

  • SHA512

    fb515ac88fc7ce7585612b06ef70cd5d05a95987a169cc9aff644271a2fe3d72696a71c96116525b819f013edd9236a27b43802eb9233016c8d39bc50977ae75

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3o:qUmnpomddpMOtEvwDpjjaYaQo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-05_b0dffa6c9865b26c812f5933741bca12_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections