General

  • Target

    2024-05-30_38c3882bfca798948affc41e206c0042_cryptolocker

  • Size

    40KB

  • MD5

    38c3882bfca798948affc41e206c0042

  • SHA1

    d5c33cb863ba4f25aac5729fb7b7680016ed7b52

  • SHA256

    a66165bfed75fd86da00fbd0b8da7dbb98328faf709445dbf931536e037edc65

  • SHA512

    478ee8c4c548e21c53f2407c93fbb0d227897da58ba43172fb342328ab15c6c52b57df5341a424f1cbf48be413a9840c68fc243272737f87f5f23d757ed21d53

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY7:qDdFJy3QMOtEvwDpjjWMl7T6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_38c3882bfca798948affc41e206c0042_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections