General

  • Target

    2024-05-30_91cf1b92349f64a8169570ea20db670e_cryptolocker

  • Size

    40KB

  • MD5

    91cf1b92349f64a8169570ea20db670e

  • SHA1

    376a39892823b1fff8333089729dbf79f25a868c

  • SHA256

    964fc076da04186e2ab0cf014f6a58d61071dd15b295d694a29316f9f9f093c1

  • SHA512

    23f9ac6ea8f744ab274cd2386757336cbfe184050e125bcfe88b9f4d1125ece29bf83322b61a204000cc04a18a8205a5c721e874d795bca29d6ce61275c6ed44

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYldw:qDdFJy3QMOtEvwDpjjWMl7T6dw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_91cf1b92349f64a8169570ea20db670e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections