General

  • Target

    2024-05-22_a0954dfd6af5018422e0c9c49bcc89e6_cryptolocker

  • Size

    39KB

  • MD5

    a0954dfd6af5018422e0c9c49bcc89e6

  • SHA1

    da5a76037388ce172210c7db989c5c11d14ce0a5

  • SHA256

    73f5ec882814f1b792d47f050c1d5b2f66221156ef3ae039fdac9235bd2bd143

  • SHA512

    bd49aebec8c93326b3101622a23b1e73cf631645a4ebc00148a2fc82e1469467c484d82f3f640e21a541bfa97d0ec463de1a42bbb303f7b5e1ff21e133b433cb

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYx:qDdFJy3QMOtEvwDpjjWMl7T0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_a0954dfd6af5018422e0c9c49bcc89e6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections