General

  • Target

    2024-05-28_5386a803cf0654279e2f2bed018b08e3_cryptolocker

  • Size

    39KB

  • MD5

    5386a803cf0654279e2f2bed018b08e3

  • SHA1

    d2a54876fe3fb833f334bf24320212a1c2fe2988

  • SHA256

    f57b5c296b877fdcbc577bcd9994f92e333ede8e0c1065b07b624b94842faca0

  • SHA512

    c4247c392cc7be69ed68c97f66502955bf8097acc389f0794329686dc295030c1220ce11d99504ee89877beef9dd35ceb1b3f78513cad8b89a852134d37291b3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYW:qDdFJy3QMOtEvwDpjjWMl7Tf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_5386a803cf0654279e2f2bed018b08e3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections