General

  • Target

    2024-05-21_3926931739524afc9dc1a56b003f9c97_cryptolocker

  • Size

    38KB

  • MD5

    3926931739524afc9dc1a56b003f9c97

  • SHA1

    b17847cb629a04a9c6db4c96094254c1df5ec350

  • SHA256

    8ae868fb010caf9aad6e5ffcaac1bf27d26814d0b7ce61036f78ab3c51f370c2

  • SHA512

    2f64b2d9d80dfc7aa2805fe53258744124566e20c58427f17e7476e3e4d71f18c51d5fef55b6a8df6970379bf8603a281ba3b8d975de420ec3ca6d589b72ea13

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBsW1:qDdFJy3QMOtEvwDpjjWMl7TdT1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-21_3926931739524afc9dc1a56b003f9c97_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections