General

  • Target

    2024-05-22_cb91170c79ff8ff03f80cb2fb1220b34_cryptolocker

  • Size

    40KB

  • MD5

    cb91170c79ff8ff03f80cb2fb1220b34

  • SHA1

    0a7933ed44c3f3b1287a55d0d0d9dca989bac6e0

  • SHA256

    9effd62f85d0f78903c430d7e229bf47a713d9b6e56cb1afd427eedf5b476d95

  • SHA512

    a79a6d343f8034a858f590d9ea813cb0abfc2cda107c6161f73553003af547e7e5586065e0029150cd587eb4a8b70861b154f67f7b027aa55748a9c93fd52222

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaB0gO:qDdFJy3QMOtEvwDpjjWMl7TdCgO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_cb91170c79ff8ff03f80cb2fb1220b34_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections