General

  • Target

    2024-05-12_0b269650a17d718006ab834500f589d7_cryptolocker

  • Size

    39KB

  • MD5

    0b269650a17d718006ab834500f589d7

  • SHA1

    b8ef4c7a59111d2dc1a4ffaec57155db3269c194

  • SHA256

    56d781bba2d0f7a9ec076db29171da0b92a2c0e4868ba340c5986f48f2866586

  • SHA512

    4d4e75e80a670eec6a36fc2d9edb5758cf237405807928187d377d341192192322901cf6bf3d2eb46b27d8bb9521f39d191573d0a5710056a1dcf4d1a1c74cbf

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBcL:qDdFJy3QMOtEvwDpjjWMl7TdM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_0b269650a17d718006ab834500f589d7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections