General

  • Target

    2024-05-09_da22fd8c83a447b65837dc5d2cb18dd9_cryptolocker

  • Size

    39KB

  • MD5

    da22fd8c83a447b65837dc5d2cb18dd9

  • SHA1

    77ee572b80b3be479b48578f414781492118da27

  • SHA256

    02bdcfea2d024906cd8389c6aff7b723ffba8c8533a9b524fc7eef65f54e39c7

  • SHA512

    301f73dd0e2f7725449691db554d5b30ccd8bbd49759878fd6847b463f9c5ad32a38a84761db07298d63a75c2785c1d1be1eae4bd0d003c13e535b5cda6619f6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBrmc:qDdFJy3QMOtEvwDpjjWMl7TdUc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_da22fd8c83a447b65837dc5d2cb18dd9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections