General

  • Target

    2024-05-29_27cd9a32ca091e2f83aa0d133d0daa6f_cryptolocker

  • Size

    40KB

  • MD5

    27cd9a32ca091e2f83aa0d133d0daa6f

  • SHA1

    896e6211d12033ab6f10faf8cdb364296ee1364c

  • SHA256

    ace735d3c49d7b5a4be4beffa8e70386a8702a9191e3b38fc8f53fe6780267d3

  • SHA512

    e1ee648a030204e95cef375b3b4fc0ffc3f7d17c5d9223f1eb42ef1bfa3d00093043cd20d2d49800b7f54a23d531fc65f0afe0d1a08de38f602d710589e06ba3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/0x:qDdFJy3QMOtEvwDpjjWMl7Tt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_27cd9a32ca091e2f83aa0d133d0daa6f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections