General

  • Target

    2024-05-16_f8b24cf3bf12fbb644af9fdbbf1874f3_cryptolocker

  • Size

    39KB

  • MD5

    f8b24cf3bf12fbb644af9fdbbf1874f3

  • SHA1

    7fe1dddbbc2d75b4315f673ead6cf5628914af7e

  • SHA256

    c81e05e7dde25ee960a7c05917c9e702d843da8d72c5b50bf49f5645807b8ac5

  • SHA512

    ec44d48f0c6631dfd2c9b647843ce43e5bcb6ad1a67450a2e28fb6a51c54f223a65ba227c999464e4918c2884c8940c97a4632c63ec68f82caf8e87ebc21ff20

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY97:qDdFJy3QMOtEvwDpjjWMl7T0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_f8b24cf3bf12fbb644af9fdbbf1874f3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections