General

  • Target

    2024-05-23_f5c92da1396e1d2c8cd36ba78dcf6697_cryptolocker

  • Size

    40KB

  • MD5

    f5c92da1396e1d2c8cd36ba78dcf6697

  • SHA1

    4fbe9accdca7be33fb49c1de1af46b9e4bd60cd8

  • SHA256

    ecbd78c67b618c131c880326ed4028c124f3b864dfd3b57e84238a78f21b5889

  • SHA512

    e02ba31e19825fdb3464fd9b91fba588c68ffef0f9443653a6cb29a6101ec6a39b4e03f63b48e9665555ae510f3270102a08f881d6a2e64a81d3b9ad80b5e5a7

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYSm:qDdFJy3QMOtEvwDpjjWMl7T1m

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_f5c92da1396e1d2c8cd36ba78dcf6697_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections