General

  • Target

    2024-05-24_962e1595c686d34f59fe64c6803bcf9e_cryptolocker

  • Size

    38KB

  • MD5

    962e1595c686d34f59fe64c6803bcf9e

  • SHA1

    f9f80986c4335f0b923df598f31779623a8c33a4

  • SHA256

    8a39be76f9d38244a200350dc3decbc7126c51cbba034ae5a46f8794d1c65901

  • SHA512

    9a0a5aa0b9f79d1b5778350b2626d8d983c57164360781c449e85bdd13118f1ded79b8ad0ce654c4aae5da155b06e9e178aee5659c4824673039e10781d6cdbd

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBsW:qDdFJy3QMOtEvwDpjjWMl7Tdt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_962e1595c686d34f59fe64c6803bcf9e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections