General

  • Target

    2024-05-25_cb14981665540904b8dbb397f4e852c9_cryptolocker

  • Size

    72KB

  • MD5

    cb14981665540904b8dbb397f4e852c9

  • SHA1

    b130074bdbaa1e5dc302031d93f6ba00cbe3e787

  • SHA256

    d3248d5cea00fe156bc5be482ecbde62737f921edc86c77c4626b163c2f93e39

  • SHA512

    5c0d4dabc40999559bf07fe4a3e0f97feeeb14ae19e10514b2c6203130740e4aa034a37cdec9ad9e4cd69d4f742d325d2ac28bad9c1411974b5bf97a928cca96

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs957:C4Q2c94OtEvwDpj4H8zE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_cb14981665540904b8dbb397f4e852c9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections