General

  • Target

    2024-05-15_195cffa00bdb31824f9688c83d483979_cryptolocker

  • Size

    39KB

  • MD5

    195cffa00bdb31824f9688c83d483979

  • SHA1

    f804187f7cbaade4cd529a1a5bd2d051dec65e86

  • SHA256

    4bb675b78f39d3e79fdc992651c263d6b1ead991a0d5d6a072c75b2f631d6f59

  • SHA512

    8d127c826d23dd9caccd39b27085b243ebb085b24bd1ab080f040b681a687fbe08be152a3ad98adb1c95d1e73394d6fc538d69ddbe34074c4bc52c9e55e63b38

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYH:qDdFJy3QMOtEvwDpjjWMl7Tm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_195cffa00bdb31824f9688c83d483979_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections