General

  • Target

    2024-05-29_f15d5fc9fe1a3553e5ef8359b6e29def_cryptolocker

  • Size

    72KB

  • MD5

    f15d5fc9fe1a3553e5ef8359b6e29def

  • SHA1

    8ba4c7100b103484d2bfb055e5b0126cf0d4997b

  • SHA256

    d6a1a72abd58a459c2ef4a3ffd34a3a51aef5c8d131f1a9ac20cd5d5e086083d

  • SHA512

    e007a1525645c334f2b915bbd89acf1eba64f7d48b70d03fb7557d44019f6d955f53a9fa53ae9c673d86476d9f20b9ae89a68b7e48dafe4d464cd9ce870f4b67

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xg:C4Q2c94OtEvwDpj4H8z7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_f15d5fc9fe1a3553e5ef8359b6e29def_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections