General

  • Target

    2024-05-24_81a554da32a40fadc031ce3d408e0148_cryptolocker

  • Size

    73KB

  • MD5

    81a554da32a40fadc031ce3d408e0148

  • SHA1

    fabf74969e8c4356688bea9b4d6f35528cbf3457

  • SHA256

    d1f40e14ace444febae5fe263b7c75812f613db3c1a95e1827867170bae1ef24

  • SHA512

    74ee53d83461e83c4eef9428d1b25e708766f9699478aac9e6ea2e04c487ec1ef8e9b5fec22256305a59c1b44281578192d719c554ded7c714a44324ab044413

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97q:C4Q2c94OtEvwDpj4H8zj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_81a554da32a40fadc031ce3d408e0148_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections