General

  • Target

    2024-05-29_6c02862e28643837e67981ea321c4828_cryptolocker

  • Size

    39KB

  • MD5

    6c02862e28643837e67981ea321c4828

  • SHA1

    b81cd55b1b69f458c80a45e55c4c3ae9c54632e2

  • SHA256

    bf552f38fd4941cfa10ddbaf2da45cbd183732e1079ebf1ae42151ecc49a2075

  • SHA512

    23a540f7004d85d9c39a6a40bd08eaf2ecab383652338595a245af5fd4f5f77acc3052106fa58ff590969e19c8cd2d1996e3a3f5a12430becc4fdd699244c180

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDb+:qDdFJy3QMOtEvwDpjjWMl7Tdq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_6c02862e28643837e67981ea321c4828_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections