General

  • Target

    2024-05-24_c72b01450810cce81c3d1fac89088b0f_cryptolocker

  • Size

    40KB

  • MD5

    c72b01450810cce81c3d1fac89088b0f

  • SHA1

    a00de9c448ada0f733b0371c15b1663cccb02c48

  • SHA256

    c3d95fb9fc5ec4563f4109caada7fa3af2335c2832ed0ff6040458aceeeaa0f7

  • SHA512

    cdeb128940f97267a3fa7c99680506875818dfd588847e67fa58a13ab1ae8f331e3a571cfd6f95a1069c7a56ecd82f8db39795e5ff1362dfbe37d0f428e920fa

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/8:qDdFJy3QMOtEvwDpjjWMl7Tx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_c72b01450810cce81c3d1fac89088b0f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections