General

  • Target

    2024-05-26_37a18f034e81d4f374b56e69a43a6877_cryptolocker

  • Size

    40KB

  • MD5

    37a18f034e81d4f374b56e69a43a6877

  • SHA1

    1d1381c276a15930ffb47771bb42034196c18988

  • SHA256

    08bba8b426d81b693f2a4ab7ff898145cce07310426b30dd7ce5731603d0db92

  • SHA512

    fe41d79bc4051ad68b1c888bf3337c599314ac2c0bab13e14ad4f6922e53cf50e0bf0beab9742d430e21182e7ee27157a1610c40b4ff3dbbaf03003604e85e86

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBW6:qDdFJy3QMOtEvwDpjjWMl7TdM6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_37a18f034e81d4f374b56e69a43a6877_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections