General

  • Target

    2024-05-20_478822cdeec0331d7f7cb78844a618a0_cryptolocker

  • Size

    39KB

  • MD5

    478822cdeec0331d7f7cb78844a618a0

  • SHA1

    76e9b2a249dea6dab86723dec99b1cd80a91033f

  • SHA256

    9fe170976aea15f69a117f63abd359ec41dd0129235679eb7ae5a0a09e81d9ff

  • SHA512

    13872e135423675d4c0735cd4288329d119d49f040f87cb4bb4749b9031e96cb4d7d10b0ba091ec9850fc7051bebc1b84384cc518e95f49abef37ff47f090954

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan8B:qDdFJy3QMOtEvwDpjjWMl7Tdn8B

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_478822cdeec0331d7f7cb78844a618a0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections