General

  • Target

    2024-05-29_5a447f35b0342d2d0633deb21209be06_cryptolocker

  • Size

    40KB

  • MD5

    5a447f35b0342d2d0633deb21209be06

  • SHA1

    64115f685b4f84a5f92105bdc281c20ca6ba4ea7

  • SHA256

    3c872216d210fb39b6ace260166a60a5a74b0cc2c05500d02d1612e577cd7f62

  • SHA512

    74776c9b91bd000b5c07b0ebdaa91a471d2745c966226a0311f61036c6db870ae214cd0839e1f5351605efe2c6eef2c1a58ec70e0dfd63e4cad256bae5bf6217

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYou:qDdFJy3QMOtEvwDpjjWMl7Tlu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_5a447f35b0342d2d0633deb21209be06_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections