General

  • Target

    2024-05-12_d6146ed2d97c5a0df907c4a70f60dd36_cryptolocker

  • Size

    68KB

  • MD5

    d6146ed2d97c5a0df907c4a70f60dd36

  • SHA1

    6685be93566ff61819d1deb0c575859d31695fb4

  • SHA256

    560199c502a8266a90f2bfa246753b4b7971e0a51fc6ea9d384b4def814dda3d

  • SHA512

    735fa84b185e1a539f67ea534a58b139cfe800f1be26c0d290a24641c16c9eafc63dc8fe135560e016949f23b74c09fdf113119cf4004e31e31f0556cf906eaa

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeC:78SEOtEvwDpjWYvQd2Pj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_d6146ed2d97c5a0df907c4a70f60dd36_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections