General

  • Target

    2024-05-31_6faf320357c1b20583f39cbccb3d6f47_cryptolocker

  • Size

    71KB

  • MD5

    6faf320357c1b20583f39cbccb3d6f47

  • SHA1

    4a756ff23ccceb3c134e9322d29885c61cacba6b

  • SHA256

    ffbee58517e2dc2ea563ab95ee40ca291a8fdce473cfbac382a2d98a3d18a944

  • SHA512

    314204d2d4036f2a7cf95040448ed3bbe2a9563275e21451b5a6e69d68b18be25b7f1130a5b5885c770d7ece3c7362715763a7eb8de87a052a4c94024e10477f

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9Hq:C4Q2c94OtEvwDpj4H8z3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_6faf320357c1b20583f39cbccb3d6f47_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections