General

  • Target

    2024-05-25_95286f2a3783ed8b621711e49deb9fab_cryptolocker

  • Size

    39KB

  • MD5

    95286f2a3783ed8b621711e49deb9fab

  • SHA1

    dea92fe6282c687814322a119b1b92551ed9fd49

  • SHA256

    3b7e3e26feadc938b84294175e35f4e896538dde6d7de60f10917fad1eeb89a6

  • SHA512

    c3efb6214cd078b2fe2d0d7032fc371a24b2d0b06b03933be35eeeec3cc6f1532d4d916143ec0e2248b315b55552587e3601e23dcf6eb8af4bc44d36ad7fa350

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/0u:qDdFJy3QMOtEvwDpjjWMl7TK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_95286f2a3783ed8b621711e49deb9fab_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections