General

  • Target

    2024-05-24_ef253dbbfee1a5f7f53cfde4af8355c1_cryptolocker

  • Size

    39KB

  • MD5

    ef253dbbfee1a5f7f53cfde4af8355c1

  • SHA1

    3f42c55175d1eac5ac222e8560b4cf4fce426267

  • SHA256

    7dacd81b5b7a815332594360d7acc7a4ecbffd789b5076ca971b6b26024e2de0

  • SHA512

    6659250b3c8e7d7b1addcecf4164bdff0811f2bf550fc908141ef6ed7da68ce3b065d1b86149bb5c33d8b90a25537efc5058a920623edf4fce9ca02d4ea3efd6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYu:qDdFJy3QMOtEvwDpjjWMl7T/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_ef253dbbfee1a5f7f53cfde4af8355c1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections