General

  • Target

    2024-05-25_c6dabd525e0f5622061737ef3ff7bf6a_cryptolocker

  • Size

    39KB

  • MD5

    c6dabd525e0f5622061737ef3ff7bf6a

  • SHA1

    5778afdfa3aca711d0003b0a11a074833edf2b74

  • SHA256

    7c8abed5816278d9a88848354342e4d224b5b82c9289e64fb097662b395f6599

  • SHA512

    68b69be4d1b8f92ab6b93427856234b6a242eaa74875fac413e1dd7ea4892de56cd4c2a1301c3a2047fe8f9fb0202da08f83f9634bc1fd6839ae64cd249e6a7e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan/MCW:qDdFJy3QMOtEvwDpjjWMl7Tdn/m

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_c6dabd525e0f5622061737ef3ff7bf6a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections