General

  • Target

    2024-05-26_0cdb821b15c248e2fb5eb55d6f4bfa43_cryptolocker

  • Size

    69KB

  • MD5

    0cdb821b15c248e2fb5eb55d6f4bfa43

  • SHA1

    21d2c4cb531403b8a2395717f45084dc69a98b17

  • SHA256

    defed592a4f0e0dc920f258987b2659df28e203f98837f71d7b95b2b1a09134b

  • SHA512

    87a471a3df0e30f9d2dde2cea7343668b8b4d9ad2f4b48d63fd4b8d25a4d5e28e645f741d32c64f46c96c09971481cef71d9056010537786de7ec65a7ba66e07

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeA:78SEOtEvwDpjWYvQd2P9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_0cdb821b15c248e2fb5eb55d6f4bfa43_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections