General

  • Target

    2024-05-24_5fd8313cabd1cd4a639f7bdebb9b5c68_cryptolocker

  • Size

    38KB

  • MD5

    5fd8313cabd1cd4a639f7bdebb9b5c68

  • SHA1

    dd972190a9ab976cf7807c4199171108b561ea09

  • SHA256

    397286af6ebdf1e63e62b713019986ba2226f4b7faa87ff60c4ef3c1e2f0b116

  • SHA512

    85a8f4a21c834c66042002a7169ee659ef922a588e8cbecae5bb4020ce5ea240f669f8ecb91a0206e2ae14f5ff9b531d8988174a602feeb7833033d219cf15a2

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38n0:qUmnpomddpMOtEvwDpjjaYaQ80

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_5fd8313cabd1cd4a639f7bdebb9b5c68_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections