General

  • Target

    2024-05-15_fad4b9cdc63d983506a0645cc94d7f39_cryptolocker

  • Size

    96KB

  • MD5

    fad4b9cdc63d983506a0645cc94d7f39

  • SHA1

    2d7b4d0400a1c1a390f1ca2053ecba5f7dea684a

  • SHA256

    56035a365d3433dafba8b29328878d30516c89ae2f7837bd1b0bfa1aacba0055

  • SHA512

    1ba427c36fbde6f765e2b65c2e96fc56150c3d45321ac62e19e1a87a0eb8671147ce4878b7905f36b523d72db5f7b2a905b65a541e9bb7908bb0bcf60c364038

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01b:AnBdOOtEvwDpj6zJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_fad4b9cdc63d983506a0645cc94d7f39_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections