General

  • Target

    2024-05-09_f6ef8c4c8810e3ddf43d2b2c0eb3405d_cryptolocker

  • Size

    39KB

  • MD5

    f6ef8c4c8810e3ddf43d2b2c0eb3405d

  • SHA1

    99fc06db8026a2750ebb763a43d03033b2f73010

  • SHA256

    88316096390727254d7a7ca066cbaa46cb4fb6ac3b21e4ec29b8b9f5d65406c3

  • SHA512

    81fe1d264741171c7387e0f870430a34bc5168137758aaee6924190162ff8321e90a32a3957b3025b85b879a2d62b3fed3f4e804bc58e39a2aa1bdb253dfbe08

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9ig:qDdFJy3QMOtEvwDpjjWMl7THg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_f6ef8c4c8810e3ddf43d2b2c0eb3405d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections