General

  • Target

    2024-05-28_52c95b59994c470b964bf1a435de4876_cryptolocker

  • Size

    38KB

  • MD5

    52c95b59994c470b964bf1a435de4876

  • SHA1

    e33e6b0e4d0b3e073e285b1aeebd7d5364af2293

  • SHA256

    3741a379e18da02f303bac945df64fbdd1c54f19ef20ff8f050368056c851657

  • SHA512

    8850798509ab0cbfe8dfe1d8293c8f52a85fd71ba57ad24c2c788955e6aa133b40691842da0c7057c6fe6fa95831549e209ccf294a7dfdc9841c54d29a52209a

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38np:qUmnpomddpMOtEvwDpjjaYaQ8p

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_52c95b59994c470b964bf1a435de4876_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections