General

  • Target

    2024-05-19_1b1d4e7dc6c5a9ab5c5a9f0b9be565f5_cryptolocker

  • Size

    40KB

  • MD5

    1b1d4e7dc6c5a9ab5c5a9f0b9be565f5

  • SHA1

    2c66bf599c2444cb2d2d5e7ebc3f91098e0e724a

  • SHA256

    868c9c1e2bdcbf9db7c6753f07bb407ba03ee5740b94fd50e3b0710ad0c53217

  • SHA512

    1e9556e6ce02deba2614745c9c2d94525681ff8e13e7610b0cf74f8cfadf8bcde8894ecf8c2713099150938e06b2dde6275851cf61961dff825b82790048e318

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX:qDdFJy3QMOtEvwDpjjWMl7T2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-19_1b1d4e7dc6c5a9ab5c5a9f0b9be565f5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections