General

  • Target

    2024-05-29_f0ed71de75ee953dd596a7a84e058d12_cryptolocker

  • Size

    40KB

  • MD5

    f0ed71de75ee953dd596a7a84e058d12

  • SHA1

    1ec212cfeb51155da5e12bf9c814e3c025e6e511

  • SHA256

    f2089b753f74a262c5f6ba508524c75e06433e14f40f1694b3ad8a1ab2ce2965

  • SHA512

    7b86e59ee4a5d0f79a0ce2af224a81ba9cb9ed747706148703ac06a8a215d374edf1ffebd3833c737280aaf5f31daef650603ce71a35030226506a8f8296e456

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/0o:qDdFJy3QMOtEvwDpjjWMl7TE

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_f0ed71de75ee953dd596a7a84e058d12_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections