General

  • Target

    2024-05-29_1f69c737b888d67f8e3b2a07013b5063_cryptolocker

  • Size

    40KB

  • MD5

    1f69c737b888d67f8e3b2a07013b5063

  • SHA1

    efaad5cf789eac33b3d0e90a67a6c1db951b8f62

  • SHA256

    394ccedd73a3ba25c006afbd0e3d384339049c4abefc62a6c4409c3baa364f4b

  • SHA512

    422f74d993fbbac5ddb3333ef3b352515a1cb8f6eb04d86009b6dd8d54cfd234943ccd26298df5ee83e9f28a4c8d02f182ea1c613758c6aa3c36c3b40b9b0d81

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBSZ:qDdFJy3QMOtEvwDpjjWMl7TdA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_1f69c737b888d67f8e3b2a07013b5063_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections