General

  • Target

    2024-05-22_2137ce086a435b864d84b593627eceee_cryptolocker

  • Size

    40KB

  • MD5

    2137ce086a435b864d84b593627eceee

  • SHA1

    3c180bb97685328d658a833cb4f1b90112567802

  • SHA256

    b811c853e12d0e8828faec24f0c16bb883043e1c4038929ae1696b14c18c2d3f

  • SHA512

    16e1c355737f712c83baa8d9dd2ab439e19b6e3f9fd56fb4ac52754d9a8bd187cd49236fe91f9400e23740e6af6e1ebd1fb9f137344f81011f225172ba1ec3ae

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY+:qDdFJy3QMOtEvwDpjjWMl7TH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_2137ce086a435b864d84b593627eceee_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections