General

  • Target

    2024-05-13_2a472e236fa39b072e84fa6859efef80_cryptolocker

  • Size

    88KB

  • MD5

    2a472e236fa39b072e84fa6859efef80

  • SHA1

    e0ed7424cdf61b55fbfc7c0d78949940d3f8f3a5

  • SHA256

    6fcb90ec81ebb66f57e832d6d02353dafbdd0ffd2badd56c740c878a7bc0d818

  • SHA512

    f7368a7d629c85a68e0539de3758608d8cd921d107554f796db58163c721764ffed218d935b7d4d769b3cd4ccedc0f4c5ef7cf4d4a4badeceb419b2e7333e904

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODO:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_2a472e236fa39b072e84fa6859efef80_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections