General

  • Target

    2024-05-26_e73e2d2c0085d4835d61bc21a4b02e71_cryptolocker

  • Size

    40KB

  • MD5

    e73e2d2c0085d4835d61bc21a4b02e71

  • SHA1

    28b9802fab6aca18b068ea7b9eb06f90a7de1e48

  • SHA256

    bfba11dae53a18f9dfb78f9997fef70aa8a473284835c2286098241bb7268d4d

  • SHA512

    535e316ee577c988738487bc138dab3fb95c30481014fa0f3e242f7b8594f34eab56aae145db318ee9a362d3005de4e9a96bc253dced7e2ff71a62aca1e89a17

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/u:qDdFJy3QMOtEvwDpjjWMl7Tn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_e73e2d2c0085d4835d61bc21a4b02e71_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections