General

  • Target

    2024-05-28_04778a719ad76d408da64cca12c64952_cryptolocker

  • Size

    40KB

  • MD5

    04778a719ad76d408da64cca12c64952

  • SHA1

    2e451bf0ab1a09d919b5aed15a2ba612b0b115f7

  • SHA256

    373766fc482c2ec245d1d0798b7dbf46f15436f269b870b9abcf21323823e929

  • SHA512

    320358e8242bcc6f450d4a97dceeb90d434d0cb4d44eb9ccb83e9e1a0131d101db0162a4472d2c5c668283beb52358d463ee73d6996ddd1d52b1b6221e8df50f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYoF:qDdFJy3QMOtEvwDpjjWMl7TlF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_04778a719ad76d408da64cca12c64952_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections