General

  • Target

    2024-05-29_271b10e6912f2c9ce7f9f6742e12aa0f_cryptolocker

  • Size

    40KB

  • MD5

    271b10e6912f2c9ce7f9f6742e12aa0f

  • SHA1

    1d27c81a850bfb4e6da6cf98ba8c85bc4c548a67

  • SHA256

    998eb45042fd809ec90df749e27e0c8d9f0a52982e3be4bbf03a78c0051fd91e

  • SHA512

    eaed178c8d37c070a1eebff3b5359d6ad8bdf4b75ecd1d100c6fd79fe5cdd9dcd26b5b1859255e0ebe417dc7fe2f5bc21da4cee36504822cdc0cb54be532a123

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9FE:qDdFJy3QMOtEvwDpjjWMl7Tx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_271b10e6912f2c9ce7f9f6742e12aa0f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections