General

  • Target

    2024-05-24_e5307cd1ac489d032175117af4f3fa4b_cryptolocker

  • Size

    39KB

  • MD5

    e5307cd1ac489d032175117af4f3fa4b

  • SHA1

    601a179906b39ccd5b8c0138e57c9e28e6b32d26

  • SHA256

    167e705db50782f6228da362fa3c0cbc711a04d6b5e6112547cd9825f176e9d7

  • SHA512

    49b44443bb1d8c2d4df487ecaf0aa31f15bc282fdc4098392fb1c3437b7d69d27f3e4ceb4c388cebd5a2aa85f3b0130bf1c40fdf19754039e991717e20c9cdd5

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYBK1:qDdFJy3QMOtEvwDpjjWMl7TWK1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_e5307cd1ac489d032175117af4f3fa4b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections