General

  • Target

    2024-05-23_fdc83a8c6a0da1176aaffa41a1691416_cryptolocker

  • Size

    38KB

  • MD5

    fdc83a8c6a0da1176aaffa41a1691416

  • SHA1

    4f25003265e1937759d40ceaf2e5a92f696b49b4

  • SHA256

    eb9857e3e6999e3ab4586d76d78e3bb6121878cf850f200cffe0161dee1f685a

  • SHA512

    f390f57a0d4eaec0d5268bcc7baf49d449f8d865df0d0ee997792c1c362e38d4dd1f7f547574d01b1ca858837b82d92d924d5efab0bb84d9d6a5f07035864132

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38nh:qUmnpomddpMOtEvwDpjjaYaQ8h

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_fdc83a8c6a0da1176aaffa41a1691416_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections