General

  • Target

    2024-05-09_3ad291f5ae2ab784fdabccb4f3d77a7f_cryptolocker

  • Size

    38KB

  • MD5

    3ad291f5ae2ab784fdabccb4f3d77a7f

  • SHA1

    7534ac3f9ff44c550a30bcfd3be4c38f171dc997

  • SHA256

    9f57d1263ac7b39cfd1cbcd6bcebd406590a52f00d66f68134c5794562412490

  • SHA512

    830f734a9763a24264a9b476b793e16effc31cadaf860f583d2da9b8527e351a99679c17785fbe0a3c6786c9af61793365a4e08b3844927b0db972e12cfaf737

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY2:qDdFJy3QMOtEvwDpjjWMl7Tv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_3ad291f5ae2ab784fdabccb4f3d77a7f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections