General

  • Target

    2024-06-01_18e3f1e90c78d5a6c5cf92d1f7f3c54b_cryptolocker

  • Size

    38KB

  • MD5

    18e3f1e90c78d5a6c5cf92d1f7f3c54b

  • SHA1

    0d704b0f27d90c6daf798f4739a0670be6918207

  • SHA256

    4d698f404cdf2183f7c2441a608646c736fec7c1d129bbfdf78fcb0b5f3ece48

  • SHA512

    a40fd692a2a0c07052d226116a276d9d3092241639aae71b81c70f561226c176717ef52f2a47135e46dbac06c2b7b7d1cd88f419700bd918617e6a9aaa5de8a4

  • SSDEEP

    768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRq:qTJu9cvMOtEvwDpjppVXzRq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_18e3f1e90c78d5a6c5cf92d1f7f3c54b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections