General

  • Target

    2024-05-10_155e6d64b1735c6b924e82f2f80f6bbc_cryptolocker

  • Size

    68KB

  • MD5

    155e6d64b1735c6b924e82f2f80f6bbc

  • SHA1

    e282bd392004cea68f42f8a692f30c4ae46e9187

  • SHA256

    c1b63dfa34d6f28586530fe0c695056d8cc33ed5c4ff7ec92484ac976d6ac919

  • SHA512

    7d3e84c80acbe2f21e43c651a107fc299491009dd789c492c77c2396ed66ff49b7cc622f27492e99298abdcc6b0f0813a74f9426c90e00ed6a29e5cd7c2a99a7

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeW:78SEOtEvwDpjWYvQd2P/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_155e6d64b1735c6b924e82f2f80f6bbc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections