General

  • Target

    2024-05-28_b28f566a9dce7439e7eaae2252843120_cryptolocker

  • Size

    40KB

  • MD5

    b28f566a9dce7439e7eaae2252843120

  • SHA1

    cddfa5e61293d364423524fe6a7107de8191cab0

  • SHA256

    64484a4c0e05e9af254b56d8fc17b655796f0215659e9b5d84e3c34556404013

  • SHA512

    0d990d6a8adc8c3bc18846f004f07ca403ac99bc1724d5393d362cf754acd23ce1ef232ba5a5c999e47068e9fec46ff562171a563eb9fa3e2471b49d7eb18c7e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBcR:qDdFJy3QMOtEvwDpjjWMl7Tdy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_b28f566a9dce7439e7eaae2252843120_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections