General

  • Target

    2024-05-24_f0dd59883c7efaf05b5b57a58125ede6_cryptolocker

  • Size

    40KB

  • MD5

    f0dd59883c7efaf05b5b57a58125ede6

  • SHA1

    3302539f9285b7d3e62ab1f21f5e24b6dd71a9ec

  • SHA256

    e4ed9e3c3fbbe3bf96112d48c9f3d567fd95e3145211bc30d5e505c53a7edf81

  • SHA512

    33226f82f0e3f4484410c0a54ae569e04d541e7cb4362c95c2812becbc7950e8c024aee48969411aad2d968133d1e7db74cce62c5162db893873a9a38b2153c8

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9D:qDdFJy3QMOtEvwDpjjWMl7Tk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_f0dd59883c7efaf05b5b57a58125ede6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections