General

  • Target

    2024-05-23_6b6bac078b3f882619efc17836f2e7ea_cryptolocker

  • Size

    40KB

  • MD5

    6b6bac078b3f882619efc17836f2e7ea

  • SHA1

    9c389ed774083fbfa934361d7ea5520cea7e07a8

  • SHA256

    e53c9a78e43cd80372d909c36ec6f20bd39d3a1d598060b2d58b5bdf0aad2758

  • SHA512

    6518690cea2d50a99cbd014d501a4dc132f967ab7b7281adf1c421491693f775c4ab6e385059af09749c1f317f072cd777c6a0244aacf1d096a02ee991c06512

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9hy:qDdFJy3QMOtEvwDpjjWMl7TH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_6b6bac078b3f882619efc17836f2e7ea_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections