General

  • Target

    2024-05-28_5cbc9cedf8e3e6152f29c7961a9fdb91_cryptolocker

  • Size

    40KB

  • MD5

    5cbc9cedf8e3e6152f29c7961a9fdb91

  • SHA1

    fafa5e9d9cfab58ebfc4d051e7f8ec69a369487a

  • SHA256

    5055d2f9e18651588dda15277a1514febaaec418133b8e1f2bb736f0e496a96b

  • SHA512

    cfb897e662b09d14607b9492c0bed2d682e1b4dcbf2d8f97828d53108a70b17728e1a05c7edfcdcbe6e70ca944b830c0caa4fcfaedf02022091cee06f6a00e97

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBK:qDdFJy3QMOtEvwDpjjWMl7TdI

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_5cbc9cedf8e3e6152f29c7961a9fdb91_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections