General

  • Target

    2024-05-15_5eb7a6f508aee0d30b5065a49f49d9de_cryptolocker

  • Size

    39KB

  • MD5

    5eb7a6f508aee0d30b5065a49f49d9de

  • SHA1

    276bad8e47f14446a9726a03f29458e422c0e89e

  • SHA256

    7013bf0f7b0d22525524cec6166c4a50561223bce6327a75dcf93c3e59216285

  • SHA512

    2010fe31988819455b5a2589a93c6c6d79cbfa632392f1c788e9ef8be61a31f4f79d8178a5b16ba3c18fc2b99c953dbd169f3fa2c54e1ba72a72184cf4fdf1d8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYXR:qDdFJy3QMOtEvwDpjjWMl7Tc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_5eb7a6f508aee0d30b5065a49f49d9de_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections