General

  • Target

    2024-05-28_5da5a50dab01a6e58fc5e5c8433a81a3_cryptolocker

  • Size

    40KB

  • MD5

    5da5a50dab01a6e58fc5e5c8433a81a3

  • SHA1

    ef0b3a4cce41866b61aa35d19688b2d72a4027b9

  • SHA256

    a7c43f7a4071ac4d103b9e43ee1be6a928141e906816da9fb789c67c148e0ed8

  • SHA512

    ea003669cc39335fa1b3c30f1575e7fa359d8e79216cbce2b5d00868fa4f652ba2d740891112704eb86c16456f28a6118159a6cc9c40e5b82783136ba87d0ea7

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUzFQ:qDdFJy3QMOtEvwDpjjWMl7TdaUy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_5da5a50dab01a6e58fc5e5c8433a81a3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections