General

  • Target

    2024-05-10_1477d5b30118894ca716dbd56a4f5f0d_cryptolocker

  • Size

    38KB

  • MD5

    1477d5b30118894ca716dbd56a4f5f0d

  • SHA1

    33c8a67a66baca35e4762e718f069b9fcab57261

  • SHA256

    aea812450c19b349e17dd2b7ce7c963815e8b4f6938dcafba8a4066e118149a6

  • SHA512

    c767e8dfd139204cc896321ba1c62e8b6583705aa8b48299ecfb1fa7c9a999c62fa2994df05450103266496b266f75b86c2e3458b30f6a06516f616f8f4d084b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBd:qDdFJy3QMOtEvwDpjjWMl7Tdb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_1477d5b30118894ca716dbd56a4f5f0d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections