General

  • Target

    2024-05-25_72af54ecd64f8cd9ca014ed14ba57cf9_cryptolocker

  • Size

    69KB

  • MD5

    72af54ecd64f8cd9ca014ed14ba57cf9

  • SHA1

    9eceda4e03f56f5de56e660db1785411cce1165c

  • SHA256

    36877606ef2c0470920c0f6381b0405096f8c139e99a0d674307f4728a32fe92

  • SHA512

    7a7910a490a7b082e86063356b69d722af77a67f10d168a34e876d17dd97d09314647337cf963b703e15efca0fea43e64e5c6d6e08830998d3ea447fa69e8d6e

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeD:78SEOtEvwDpjWYvQd2Py

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_72af54ecd64f8cd9ca014ed14ba57cf9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections