General

  • Target

    2024-05-27_3c6190fcb2935c9b6596a4c957f03bf0_cryptolocker

  • Size

    40KB

  • MD5

    3c6190fcb2935c9b6596a4c957f03bf0

  • SHA1

    355c366025790f304cfe53595b99eaed9b970866

  • SHA256

    21fa349fb1d048615a93fc7d1371760f860065b063f399151775a0da1b64b70d

  • SHA512

    2e5db77bff66896fd907190a95335acffb4e5fd98c617b3dca0ca1668451171e7a0f9ddfe73a8dc33f48e7fd6d01807ad99d68d8b43cd9192d2230d6972ac732

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfFti:qDdFJy3QMOtEvwDpjjWMl7TT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_3c6190fcb2935c9b6596a4c957f03bf0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections