General

  • Target

    2024-05-25_e3aa542879e64345a0dcf73f1c99df40_cryptolocker

  • Size

    39KB

  • MD5

    e3aa542879e64345a0dcf73f1c99df40

  • SHA1

    1040c3a200d5813e9097ad0dd6a9fdf2d680ab6b

  • SHA256

    2ded3f5fe2246ae7e7bf0cd3b14469d9eac02aea7f4f7181943c5fdcc9383e87

  • SHA512

    13411d1eb1388ffdf90b0f0b77a5c04857297851e932bfefbe6554a447156a9d2f50aa930f984ae5b5653447f8967a36a68fc835336db5ce48b7652dae80a8ed

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYC:qDdFJy3QMOtEvwDpjjWMl7TL

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_e3aa542879e64345a0dcf73f1c99df40_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections