General

  • Target

    2024-05-10_29bd9fcae16d0600e1e8882aaf422707_cryptolocker

  • Size

    38KB

  • MD5

    29bd9fcae16d0600e1e8882aaf422707

  • SHA1

    ad3e334c1554b0b485b40b55d158b22367028a60

  • SHA256

    6770d08815d98f26b6889567703ba9c961983d95bcc12f6688d9d4c31845363b

  • SHA512

    cff703601c8a7bca118703065788d6b1855caab48d569b12299e93be7a5344f0c4f0a70e5270b1b2774d8eb50fdde6be52c64755d5b6e8214c64dfcaca7bc0b4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9iSQ:qDdFJy3QMOtEvwDpjjWMl7T/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_29bd9fcae16d0600e1e8882aaf422707_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections