General

  • Target

    2024-05-26_9c5f2a388de87736c591d079bbfd5cdb_cryptolocker

  • Size

    70KB

  • MD5

    9c5f2a388de87736c591d079bbfd5cdb

  • SHA1

    1c6dee956cca04dab4cf7bf80ad70509b8e3680f

  • SHA256

    0d8ae70e4263a510a7c080da09e546cbebe74df922a9f66181c5de7598632e9b

  • SHA512

    b39dfa777fb2112b8423e0502e78ad5c81903e980add77d131c870551a03a8b687d3aede060c30a1c68ad0eba961e8afd31a236cfed17daabee5d0602e970be5

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9B9:C4Q2c94OtEvwDpj4H8ze

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_9c5f2a388de87736c591d079bbfd5cdb_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections