General

  • Target

    2024-05-25_70ea84e6d93808b878592b6c0fad25b2_cryptolocker

  • Size

    39KB

  • MD5

    70ea84e6d93808b878592b6c0fad25b2

  • SHA1

    b856610dd6e542ccb44b8ab93cc7c7ef668c1a04

  • SHA256

    5fd21708e5c70731890b15f84a45776b84bfd29fbb7cda91b5877584aaa23f5d

  • SHA512

    e6ab6d59ba26faa3e6a52c4d6d54db5f7d14032a66f7562199fad49ced5ac0d35bd3531e5b6828943d2ac6f874cae1e1d03a3cc5bc5d77678c20d7c5dfc386c3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfF1:qDdFJy3QMOtEvwDpjjWMl7TW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_70ea84e6d93808b878592b6c0fad25b2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections