General

  • Target

    2024-05-31_d9b6069be0b0f3b42e8e3c2f3eef8f3d_cryptolocker

  • Size

    40KB

  • MD5

    d9b6069be0b0f3b42e8e3c2f3eef8f3d

  • SHA1

    13c597d1c87c0560ca03f7f84de5f416f06199ca

  • SHA256

    711f793440e443925b78291656a4b124761b56ffcf5ca1479c0af0633dea4ef0

  • SHA512

    80f7d5ace6098a0202aa14876482c348445e0ffe0a3f3a40990b1f0b21db4efa60fa57be6599a86f94c024357865787db062b076b985351e4267b39a68ec51cf

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc4SK:qDdFJy3QMOtEvwDpjjWMl7TdsK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_d9b6069be0b0f3b42e8e3c2f3eef8f3d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections