General

  • Target

    2024-05-27_6b9cc786c80b89bb93476c49e56ce7f2_cryptolocker

  • Size

    39KB

  • MD5

    6b9cc786c80b89bb93476c49e56ce7f2

  • SHA1

    3420873e478e18e56075dafc4043d0e1b6e6a945

  • SHA256

    df8ec8b107e0ccfd80badcf6f51dee32777910cf5306e0b59919f1eb275abf92

  • SHA512

    7b05ffb44a1d02d331906bb816dc4ba0fe68d5dcefb839dd38c5861c3935cce34a3a55eeef1eff37ec0cc0315148dd03b5e63a0e6174ecc31582471ef88413bd

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDP:qDdFJy3QMOtEvwDpjjWMl7Tdn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_6b9cc786c80b89bb93476c49e56ce7f2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections