General

  • Target

    2024-05-31_476c7f963739b9a510659111453e6e81_cryptolocker

  • Size

    40KB

  • MD5

    476c7f963739b9a510659111453e6e81

  • SHA1

    85209aa3332414f98d4d9b6740d50beabc0ea885

  • SHA256

    45ea425500da23de9d3c2601c6d0f4e0ce67e2b6f398a9d4367ce05b3adbc869

  • SHA512

    e816353cdf3f68d6e468bee79bce5cb2dd5eeebf5dff2f176a1334b9daa6356b907835686b592e5a2a560c366bd86daf0df6c869bec0a109f19ea972c7a580a6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9hn:qDdFJy3QMOtEvwDpjjWMl7TC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_476c7f963739b9a510659111453e6e81_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections