General

  • Target

    2024-05-22_17e336a41c5a9b46d3abd447de9aea0e_cryptolocker

  • Size

    40KB

  • MD5

    17e336a41c5a9b46d3abd447de9aea0e

  • SHA1

    b1825a16e8659b1faab04621e88b03db0a610c46

  • SHA256

    9ac7e6e0578f2b9d11f91d5b3624bed66d79aecc72b009445a6ef3320ee106e6

  • SHA512

    dbdb061582dc7dcbf8fdd9bd378fd0fa405f994f7af9f0e05b81d8390d72ddd7378af537bbdaac5294686f691176e1c3887f20be67034cf8277c16e2bdc3018c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBB:qDdFJy3QMOtEvwDpjjWMl7TdH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_17e336a41c5a9b46d3abd447de9aea0e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections