General

  • Target

    2024-05-28_f9ea2618e57d9c1942f2d9bef73ba3a8_cryptolocker

  • Size

    39KB

  • MD5

    f9ea2618e57d9c1942f2d9bef73ba3a8

  • SHA1

    405dfe5f97b8a537b9c2d821088a50ac0f80d718

  • SHA256

    754ad11032c37b69b80d87cc7024d9bcd53c690c85567894c226dc044f6ca4bb

  • SHA512

    4d17ba39ce87c6b85ee8cdaeb72ee3f964c54aa0974bc96e38c7ed22b2eb39856ca42f1cb2e3b7ccffb633133cffb3b6ee6cc2daa08e53b543f77c56347a4c7c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaU+:qDdFJy3QMOtEvwDpjjWMl7TdaU+

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_f9ea2618e57d9c1942f2d9bef73ba3a8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections