General

  • Target

    2024-05-12_b894526e12432af473973ca9816addda_cryptolocker

  • Size

    71KB

  • MD5

    b894526e12432af473973ca9816addda

  • SHA1

    5c0725a471fc2b948da0290cfb3ae90842ac8397

  • SHA256

    9c74ab812f18865db0d3c38f5b51abd0b8348d07428630ea2c29bd22e0e63abf

  • SHA512

    bb74e5b60507122eaf0ae0423da9e952c998fdee9fd1da5941609f369c5781b7f42c83dbeee3b151abfa20f9d98a5becb960ae98f2b6f5adba743ae1ed63fa93

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9IOI:C4Q2c94OtEvwDpj4H8z7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_b894526e12432af473973ca9816addda_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections