General

  • Target

    2024-05-31_3527ebc5593fb3bfe9e6d7f4a4565d9b_cryptolocker

  • Size

    69KB

  • MD5

    3527ebc5593fb3bfe9e6d7f4a4565d9b

  • SHA1

    dd3d3207f4d3de75c3f8f517f974e8cc72623d67

  • SHA256

    251d69a232bf0e382c81f845967676a8ca4198011fad997a0953e89df7463968

  • SHA512

    3fb10f5ba57b6ebbc415d342fa509dfc465fc4f1d25ab4ab740b9138d693c47db9a199de4def7db461fe274e66320923589f92fb8fe1b9f269bd16287938ef24

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P4:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_3527ebc5593fb3bfe9e6d7f4a4565d9b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections