General

  • Target

    2024-05-10_5d090de731c3dce01bf879d8d79bad1f_cryptolocker

  • Size

    38KB

  • MD5

    5d090de731c3dce01bf879d8d79bad1f

  • SHA1

    ae629234fd008a6a945feeeabef6d8b33c71297d

  • SHA256

    9e7a7d4da8e9536754da99a6344d8b1895f1006792a67fdf3f95a41a794356dd

  • SHA512

    46c68d3f2f313c14945cb34d63b161a7fdc8e2933557a877e6a54117ded93b287d97d1b450453d0e20a3a72aaa9f12a7f35b8975c14ba597cd42c31c39a7d8aa

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9K:qDdFJy3QMOtEvwDpjjWMl7TJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_5d090de731c3dce01bf879d8d79bad1f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections