General

  • Target

    2024-05-14_b47e90c4b63df9702e70dde9893f2a85_cryptolocker

  • Size

    39KB

  • MD5

    b47e90c4b63df9702e70dde9893f2a85

  • SHA1

    a827ffb10d365596b0b5194e8b23dda99cbad086

  • SHA256

    679d9d7e89e954b51e839e17d2aed6d620080f82b5651e97a757037777c6219a

  • SHA512

    54e62ad4c1fa9d56d04e4503f749ec3ccf359d9678aead2c333c8eaf11e5df4bcc97b7e4507dcb209a47ccaa88e20d6f387f4c85a0801e72f5e26ff875ec38f6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBeM:qDdFJy3QMOtEvwDpjjWMl7Tdp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_b47e90c4b63df9702e70dde9893f2a85_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections