General

  • Target

    2024-05-25_419e2f48f8497a35089d0d3bfd67c96c_cryptolocker

  • Size

    34KB

  • MD5

    419e2f48f8497a35089d0d3bfd67c96c

  • SHA1

    6fc266633cd472fe5705fc083502faddd21d61c4

  • SHA256

    95868bf6c356dbf1d8299dcc949ccb62186209fbc83c0705c09d0865d0e2823a

  • SHA512

    9be445312b47a122c52c07fef3c7227d39250de1c37935dbb6f5dad6c0fbac5b3c1e42508e1cbfd15555b8c0bcf75b492f5539bf33b544281b9dcf16cf4b747f

  • SSDEEP

    768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtXN:bFPmpiif/oc+vXN

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_419e2f48f8497a35089d0d3bfd67c96c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections