General

  • Target

    2024-05-08_a2737f9f169be02cc01fe9d5ad6625ab_cryptolocker

  • Size

    38KB

  • MD5

    a2737f9f169be02cc01fe9d5ad6625ab

  • SHA1

    08f3c550829a125e188facd15a7d341b51866b75

  • SHA256

    fcfebfad816345382648bdbdb43c5111573727483533c3ccf998e16614daf931

  • SHA512

    a92a17a44f0fb55108f33e531aa29c51ae40917a4af463d70a587a5a35a9a25533c423a61d6828738e9e0f1c0cdab09ce25ff4bdd0e8e1e4d686753fd5e25720

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBs:qDdFJy3QMOtEvwDpjjWMl7Tdm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_a2737f9f169be02cc01fe9d5ad6625ab_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections