General

  • Target

    2024-05-30_deb22ab386c6d30b96f7fe6bd1fcaf7c_cryptolocker

  • Size

    89KB

  • MD5

    deb22ab386c6d30b96f7fe6bd1fcaf7c

  • SHA1

    9a850e556a904e115e29b8598f1beb71ba98f09b

  • SHA256

    6a7efcdde19208f7afbdd7ef284f084544880e3e99bc1b9dd26b12e59cd1f58e

  • SHA512

    d3b5065a2d31c4dc7eb76142757a044286463d3b54a04c59bd1a4fd72b456e6bf3171e4a7a8ac4dac88593c4e28ebc1229d9a292d8a25ee6d4cd3fc0379a2423

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIiv:AnBdOOtEvwDpj6zx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_deb22ab386c6d30b96f7fe6bd1fcaf7c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections