General

  • Target

    2024-05-12_833803927b29a1b23dd2fe8aac9bee32_cryptolocker

  • Size

    37KB

  • MD5

    833803927b29a1b23dd2fe8aac9bee32

  • SHA1

    3bc6267d3da7f37db0b598d2a6051391040136b7

  • SHA256

    2b507af1901943527d2771c90cf6ea990c452b6974e609add73e9d834bd47b06

  • SHA512

    8b6ea4bc81a8e0dcb53c68959e7fd7709fcef21c62ac0c8b10cfcf0c1e6b3df470bb66f47ee58b518e6b4596a89ef3f50f4a830a1e0496bdddc8ad849bf26bb7

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWR4:qTJu9cvMOtEvwDpjppVXzR4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_833803927b29a1b23dd2fe8aac9bee32_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections