General

  • Target

    2024-05-12_6ce80808abf3338d561e6c3cff1c446a_cryptolocker

  • Size

    39KB

  • MD5

    6ce80808abf3338d561e6c3cff1c446a

  • SHA1

    06d076ba9f917023084855fc899a2a9695d25ddf

  • SHA256

    bc1be40dd07e3b5abaf2a68ffd709d089f09fd26ca2551b3f8cb5d1533718c17

  • SHA512

    64b75908ccd5d6dd264d7f2fd737c0084a68e6433fb0c0a0e6003e4821566fdf10e69666be0fae7669a6229dbabce870a1784b2059f27e93efb9ef97a149007c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBB/:qDdFJy3QMOtEvwDpjjWMl7Tdf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_6ce80808abf3338d561e6c3cff1c446a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections