General

  • Target

    2024-05-14_28301c91afc5ea550993f5fa981c888b_cryptolocker

  • Size

    40KB

  • MD5

    28301c91afc5ea550993f5fa981c888b

  • SHA1

    dfd88e37f316b7a2b95cc68b9d7953a66ce4c304

  • SHA256

    d68363443726df63416dcbe5df5f891ea50ae6f684a31b01bdf5c768f3a98c57

  • SHA512

    1a60a2de73d7d7cfa712be77a4b120bb0c650af9c97c2c4d6174352f9bea0a4f0d80ae8ecf6d972687152f3f0d0a90d2b5e928479583e10d69dadc51e4c5c1f9

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYljP:qDdFJy3QMOtEvwDpjjWMl7T6r

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_28301c91afc5ea550993f5fa981c888b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections