General

  • Target

    2024-05-16_c59902a0649a040ef280c835e5069e9b_cryptolocker

  • Size

    69KB

  • MD5

    c59902a0649a040ef280c835e5069e9b

  • SHA1

    64165eccd6c287648b5bee797cb6775f05badbdf

  • SHA256

    69320d0c4ce5c0a92724095b5aa047ad7fe37c7b8a429a90527c62964767305b

  • SHA512

    f48394dd05416573ba8adf6b50acb79b61207820366ff3968b8ee799c4549162ca790eb4dc1c6df336a60747e6d1afe9fd9ca489df646cdebd7cd466d89e9984

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQApkT:78SEOtEvwDpjWYvQd2P0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_c59902a0649a040ef280c835e5069e9b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections