General

  • Target

    2024-05-19_409147bf222038ee8ec1a27f7439a958_cryptolocker

  • Size

    40KB

  • MD5

    409147bf222038ee8ec1a27f7439a958

  • SHA1

    fd79903004aaa1de759a023656db8ac61724a15d

  • SHA256

    bb6ba69b09f26f90760edb394c39f17d5effb42e54d3f7504fb721b73696beb7

  • SHA512

    1bf20fc46a9dd97cb319c0ad0ea450e1630b7b34038235eccbd1a93d1822c4ecf86c2a7e0ca2c45e476a9ec4e796008f6fa90fc48caa98f1f141cf8f0ff766b8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB8R1:qDdFJy3QMOtEvwDpjjWMl7TdGj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-19_409147bf222038ee8ec1a27f7439a958_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections