General

  • Target

    2024-05-09_d795e52a9525e057aa18081a46986c58_cryptolocker

  • Size

    38KB

  • MD5

    d795e52a9525e057aa18081a46986c58

  • SHA1

    d75c7bacb46d3d6818e7b287d73a165ad15f07ee

  • SHA256

    cf92afcc4787788852bf80144b7536ead8470eac3a51b8840a5bc868bb08080b

  • SHA512

    2765b1adc895fa29939285cb798e536755299e6602038f062ca55e387f94f17f6c9d9f9df4ad2f2425b6b60f7ece05a7ac4677adefddb3babd8bf2f5b76ebd92

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan8G:qDdFJy3QMOtEvwDpjjWMl7Tdn8G

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_d795e52a9525e057aa18081a46986c58_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections