General

  • Target

    2024-05-17_ef02d76261a2de71b737f3d2d5880c67_cryptolocker

  • Size

    39KB

  • MD5

    ef02d76261a2de71b737f3d2d5880c67

  • SHA1

    9efc9ae2cabed4e40197de56e5b2c016a3126d36

  • SHA256

    28fb869537fa419bab35790a677f6a4f41ae611aa20ed2a40eed1a3f86048b0d

  • SHA512

    916c15c230037fddca46fa37fa3c9c5f9f3383f98e3f350aa57d8ca0fbc7897f3493d3ade242bc318351a8ac04f15171b837b7fa19d37de2e7a7a876bde8ea2a

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBAS:qDdFJy3QMOtEvwDpjjWMl7TdV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_ef02d76261a2de71b737f3d2d5880c67_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections