General

  • Target

    2024-05-30_f3a4d5172d8ec613e139cf557a880928_cryptolocker

  • Size

    38KB

  • MD5

    f3a4d5172d8ec613e139cf557a880928

  • SHA1

    ccb18d5b8c46fffd487909d1de90d0d48b0fcb71

  • SHA256

    3e4c8a12e9e59b4539c4a3df2dd9ef0f866726b76b4389820fc2c727f48ed24a

  • SHA512

    b8b56e472bc16247a21e507ab5d0058c4cd017a7cdcf2c9a362aa05fbf43af8f7f4a5f0e343d77133596aeaf04c95adbd1ed510597eb38813139804c2f8ffd25

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRG:qTJu9cvMOtEvwDpjppVXzRG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_f3a4d5172d8ec613e139cf557a880928_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections