General

  • Target

    2024-05-07_5b833ceb69a7f2e864d382e71539aac3_cryptolocker

  • Size

    38KB

  • MD5

    5b833ceb69a7f2e864d382e71539aac3

  • SHA1

    31a155c2abdf29e56b5e348d063525c7a4e91376

  • SHA256

    2f61e930fa3894bb41b07ca126c52eb7ae4c918f78bd92f95f3ebb3d2ca8b041

  • SHA512

    19e55be1aa69147538b5347215aa5a6fc261ac86a5297e97f98d21a93ccbe0eebf7a680c7a77fa00a2742735608d0a38e9b30cf81d3c975a3bfd7d8636cd6aa5

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBS:qDdFJy3QMOtEvwDpjjWMl7Tdg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-07_5b833ceb69a7f2e864d382e71539aac3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections