General

  • Target

    2024-05-24_cdc64b64ad70f37fb9ffe69653acfb8b_cryptolocker

  • Size

    89KB

  • MD5

    cdc64b64ad70f37fb9ffe69653acfb8b

  • SHA1

    45e0881baeb606d9f89082656f0225f472100a83

  • SHA256

    a480925e8a3715965c0c10fe67699da45bd3bc84d0d41c99f8f1d836e77d5107

  • SHA512

    560118cb618b1cd6ddecd9e30939b10e47e484c3600498dbabf9869915dcff220ddf826e3f74ae9d0cb324e4f9fdd5dc0990e89917854c270ed7e694996279c7

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODE:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_cdc64b64ad70f37fb9ffe69653acfb8b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections