General

  • Target

    2024-05-29_39964d8ab45f76964806349c75a01d8b_cryptolocker

  • Size

    40KB

  • MD5

    39964d8ab45f76964806349c75a01d8b

  • SHA1

    0bb17235cff7a0d36ef9a080cbdbbf6b3ac5759c

  • SHA256

    0f4b7d8de79f1900dd5b391c2ac050aae564c44c57068012a9bd48553d155ef3

  • SHA512

    043e7b7e83192ecadf46e22b2558ea620b67ed4e613534eea59fd6f28881f71f0f5b09f75e3a65a30b2c86c4ee688225b1d41dba3bd1a67c4309783af45e2775

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfP:qDdFJy3QMOtEvwDpjjWMl7TYP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_39964d8ab45f76964806349c75a01d8b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections