General

  • Target

    2024-05-27_e275348559d89db6027bf59ae044e3b7_cryptolocker

  • Size

    39KB

  • MD5

    e275348559d89db6027bf59ae044e3b7

  • SHA1

    b28968c69a39c42fd838c4993195fae309c87f31

  • SHA256

    a2885d464ed2f493f304d6d6f2a7454636d9da9ae1a68290345bfbb34db4bbd2

  • SHA512

    5903d9ce259da127bfb28b563da87c75e63194f7570a0697c876fb49814534ac703839c7ba7db66fb250bebe518b35d501d22f77aedbecc1dab91c1271e9563b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan//:qDdFJy3QMOtEvwDpjjWMl7Tdn//

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_e275348559d89db6027bf59ae044e3b7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections