General

  • Target

    2024-05-27_d26f9d91692857cd02e8fd7e7e580d07_cryptolocker

  • Size

    40KB

  • MD5

    d26f9d91692857cd02e8fd7e7e580d07

  • SHA1

    bb8f3cb53bdb5cf5e9460f19cc5ffac74ef2a407

  • SHA256

    d8f998dc2c7235b26fc6e288edbb1aac4fc08a0993612537d09c3fd66588c877

  • SHA512

    87829ed71191b4c48b7ce5ca856bd92cf0c92a932644350d08ebbb9c16e2a7b77aeb4a81e68799b10b0877225fda381c0e0b827598c6a64cfd572a397629f931

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYW:qDdFJy3QMOtEvwDpjjWMl7TH

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_d26f9d91692857cd02e8fd7e7e580d07_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections