General

  • Target

    2024-05-30_4fa693d3aa81a30f1008656f59fe252c_cryptolocker

  • Size

    40KB

  • MD5

    4fa693d3aa81a30f1008656f59fe252c

  • SHA1

    7e1d64998acc887873e9f1dbb7ae10cebb743f24

  • SHA256

    28ca3f7b2d4b0de187e109b82efa360df346b252c98b0559b291a3f9bc6f1cb0

  • SHA512

    f5bdd9d939e15f99c4f21c7444f8f66187d3cdfbe48d3bdfe0cd5a404edd969c696d68dca02cc6bc457ea9142e1da46670e888ca1861f259e3ee3b92f3f8de59

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYZ:qDdFJy3QMOtEvwDpjjWMl7Tk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_4fa693d3aa81a30f1008656f59fe252c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections