General

  • Target

    2024-05-31_b6003fe4c3a59bb88bbac2cd95543c77_cryptolocker

  • Size

    40KB

  • MD5

    b6003fe4c3a59bb88bbac2cd95543c77

  • SHA1

    c9c8a0bac9a512a25d277eb1fcfb6d949da7d7bb

  • SHA256

    f0ce98b1d89806fa7e900c3f323fe59523176bcee25ea8e3ce305b3bae035cc0

  • SHA512

    86b370badf100e70b3c0110f52c894dfdafe113d35fb965452509923df83e0fae146b86b62848b89f4b11a6024a9c9aba57aac914c7ba2980d2e5c172eae2157

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBAJ:qDdFJy3QMOtEvwDpjjWMl7Tde

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_b6003fe4c3a59bb88bbac2cd95543c77_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections