General

  • Target

    2024-05-28_59b7524a56d366cf98e7f3195b004f86_cryptolocker

  • Size

    70KB

  • MD5

    59b7524a56d366cf98e7f3195b004f86

  • SHA1

    e5c03a150f193d4f20058bbc8f69a79a59e5cf82

  • SHA256

    0ac791002c71b86b7e4b4870a2f8f9673f7679e8bc00140350e82eeb1a73541d

  • SHA512

    20d660a17bc44d0103aceb1d201b3165351491f0baec25c7a6bf270816ec38f4e9d63adc45fc9ee0a175de0e1cf9bb2e9771d9e5799f450fa640316207f5ee43

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe7:78SEOtEvwDpjWYvQd2P6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_59b7524a56d366cf98e7f3195b004f86_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections