General

  • Target

    2024-05-29_a4078c4aa3dedf53bba54d58be5bf8ce_cryptolocker

  • Size

    40KB

  • MD5

    a4078c4aa3dedf53bba54d58be5bf8ce

  • SHA1

    f95849140bb3be176b48ccc95729e0f926d18e6c

  • SHA256

    a576ca016a23cad1fee046b185774ec20423d50e59f58aba5c90122249ce7a68

  • SHA512

    f067ad6de034c2f01880665b99bb47bde4bd2b1e31131aa083357a1540119609b496e1ac34ea8214834346feab00a4ed63728a8cb337249acaa1542b096e670a

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9Fu:qDdFJy3QMOtEvwDpjjWMl7Tv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_a4078c4aa3dedf53bba54d58be5bf8ce_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections