General

  • Target

    2024-05-31_38a3b6415866f8547c8eb88a6ef49c30_cryptolocker

  • Size

    70KB

  • MD5

    38a3b6415866f8547c8eb88a6ef49c30

  • SHA1

    9f881c24e257cc2a9fe466038bf6829dfd52d530

  • SHA256

    6a4ee169ee32603fcfb2199ab1f93afb64611448b9c8fbef4e62292508272658

  • SHA512

    3c551011fd5ca676baf4f9d5da417357e134f58453ffd1b9a3b8368d24aab7386e5aa8e10b52ef226b9957234bdb3d64d778769863547212749a2c75d8e72fe5

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PJ:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_38a3b6415866f8547c8eb88a6ef49c30_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections