General

  • Target

    2024-05-31_c9be99c76f5cf14f5a5850509b004ad3_cryptolocker

  • Size

    71KB

  • MD5

    c9be99c76f5cf14f5a5850509b004ad3

  • SHA1

    7bf54956cdbb41eed40e7f1c700c0277421d7e16

  • SHA256

    4c9cb75c38b0011a8510dc4b0b04e2195848a11215177c8de4f807bdfcb3653a

  • SHA512

    5a7afc0f89339886ed80140c71b5d5dd20e95ced1ae06b05befab998843f0418bbf423fe46b74bcfa51de0026d8b209b0d8537490e6966fb6ea4aca57d1921c7

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9Hj:C4Q2c94OtEvwDpj4H8zO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_c9be99c76f5cf14f5a5850509b004ad3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections