General

  • Target

    2024-05-31_bdafe9d45b869e30857d094160c74eae_cryptolocker

  • Size

    40KB

  • MD5

    bdafe9d45b869e30857d094160c74eae

  • SHA1

    103e60bbb14084dea204a3e66308f15f3f2f6318

  • SHA256

    3c563f5893d8de8d13a153c0acdcd3afa15b5b8e936a565eee80c3b81c4d8352

  • SHA512

    c19e0d82e54cf1333359daeea86427472e6722b5463729ada965d3fa7ef52ff158a8ff0f2e4b22ce63dc41d3cd4888c4f0c8abbc1512db90137f93d29a30c246

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBiT:qDdFJy3QMOtEvwDpjjWMl7TdAT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_bdafe9d45b869e30857d094160c74eae_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections