General

  • Target

    2024-05-24_5f72f287c9cdea04e08d268611f5e1cc_cryptolocker

  • Size

    38KB

  • MD5

    5f72f287c9cdea04e08d268611f5e1cc

  • SHA1

    d4dacd92bfb6e0ecb85f52468d7405a038fd244b

  • SHA256

    55d82f08f58c1b7c8585daaf39e3ce083ead527fddfadb50d8c6f1f9e44e33c2

  • SHA512

    d0472321bf08d374e864f7720076991bd430595584fb19dd99550865fc7e1416a57b9184347526297c6b4856b624cd4c8310f2347624a8586b0a896d61b5e667

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9H:qDdFJy3QMOtEvwDpjjWMl7To

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_5f72f287c9cdea04e08d268611f5e1cc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections