General

  • Target

    2024-05-27_272cc86825cac5f615737d12973efefa_cryptolocker

  • Size

    40KB

  • MD5

    272cc86825cac5f615737d12973efefa

  • SHA1

    2c73c2bd6774c032a98000d45c3526ebfbb19996

  • SHA256

    428caa944696fd86fb2a144ba0bd5bf481b9170996333c5dcdf6caab0f2f20e1

  • SHA512

    61be1660695ec97c0a61d1bc0f6c99668f0755e588679ade58936dbae78365655bddb04d4f23253a0b31c65237661c7109d9565b44a3de14958f0f7eaba1d7e2

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBJJ:qDdFJy3QMOtEvwDpjjWMl7Tdx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_272cc86825cac5f615737d12973efefa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections