General

  • Target

    2024-05-15_d975fcc67a57d5f2449b5cfbbb2ddf03_cryptolocker

  • Size

    40KB

  • MD5

    d975fcc67a57d5f2449b5cfbbb2ddf03

  • SHA1

    7d1c30cab3dccb58a69a1c68dd36b4ade5db88ee

  • SHA256

    f7b9cbb869290cb3d1fb3c45bdf39ce82a238a54488f7645fc404a448f3b134d

  • SHA512

    b4ded83abac1bd71b2cc304791d93b17c1a1e68721f9d574f9d659516085aa5d8af1ed25db870fa76c748c03dbb96c26c1a5251476fe756bb0da8654b8da8715

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBMe:qDdFJy3QMOtEvwDpjjWMl7Tdv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_d975fcc67a57d5f2449b5cfbbb2ddf03_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections