General

  • Target

    2024-05-07_92de03884c282305bac818767243b33c_cryptolocker

  • Size

    39KB

  • MD5

    92de03884c282305bac818767243b33c

  • SHA1

    5ca3f7fb71d31a306090f9301e67d1da9ef27278

  • SHA256

    c940bce02486f13210c8a9cfa0c73c1b98d8ec11ec8764fbdb71fd308f8407d5

  • SHA512

    8efd6cdbee4ff2f8ab2c13d1e3f0ab0a28912d6b178a918e228f190e10f2c8e3b9d249a9ad1aedd92e7106760f40eb8ed420698e2a06383c2004d838b7821763

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUo:qDdFJy3QMOtEvwDpjjWMl7TdaUo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-07_92de03884c282305bac818767243b33c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections