General

  • Target

    2024-05-08_7ff56c7f3fd6e142d21b48974db40ef9_cryptolocker

  • Size

    68KB

  • MD5

    7ff56c7f3fd6e142d21b48974db40ef9

  • SHA1

    5b479f652936e8d8bf9d0a201691f5cf8357150f

  • SHA256

    73f5847a0a6f8a0a3fe79d000295b71aee50b784299321f934cede6b035f5473

  • SHA512

    147792edb591b443f64594965964cf9a7ea57786af0d2245b4dcc65b94e64fe5c05bf3ba6aa3598dc924c4ee7689c2c28a4947b1ed4f1bab0d049048ec96b371

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pg:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_7ff56c7f3fd6e142d21b48974db40ef9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections