General

  • Target

    2024-05-13_a7e47bf22f7988d4d9832df694fc91a4_cryptolocker

  • Size

    39KB

  • MD5

    a7e47bf22f7988d4d9832df694fc91a4

  • SHA1

    571cc8d7869e3c9c1c5b24846d9aa582bee11ecf

  • SHA256

    19a7a1f1d063ec510feb7cec0096347ee73bd7a91d5b78cadc0ac08180e1032d

  • SHA512

    6b67411e5774a9155cc45921acf47f94fca5a23a73c5ed765745150ef2c1776659d8ca42ec73d06e427fd533c64c0465ba78c0c94d713d9458ee892dceb607fb

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY3:qDdFJy3QMOtEvwDpjjWMl7T+

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_a7e47bf22f7988d4d9832df694fc91a4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections