General

  • Target

    2024-05-17_a269774e3f5688f161d2a40394100a4f_cryptolocker

  • Size

    69KB

  • MD5

    a269774e3f5688f161d2a40394100a4f

  • SHA1

    59de032cea7c0cbb3b85fb7ffbb50941ddb78465

  • SHA256

    ae52ca8581b2af9822d6e27cb70e14edb76d3203d290f1ed1ce68e8c4e3b23fe

  • SHA512

    c2f381b06cba4cb8c7f69a97a5dfe11bac61171ee09dd0113d19a3618c31daf1f1e38b7ea95d27208d9827308551130a484bbcde7643accb25e0b807c4e0bec4

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAed:78SEOtEvwDpjWYvQd2Pg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_a269774e3f5688f161d2a40394100a4f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections