General

  • Target

    2024-06-01_be626f8fa5aa5560bb5640e1bffec33a_cryptolocker

  • Size

    40KB

  • MD5

    be626f8fa5aa5560bb5640e1bffec33a

  • SHA1

    e414af3c1be3f4ccbd1d77555b6e919b49f13b76

  • SHA256

    c275383f5590601fe7094ffba53b63983a0865e372b2cb985fd6f17459bbb999

  • SHA512

    6be32b65ec82448b2a3a5974095aed81410c1d3bb1a72ddfda8dc85419da6287dfaf2dd1452e25246f207455d2e3c0bc6bcd92ff43c410e5e5641c0fb893be09

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfFt9q:qDdFJy3QMOtEvwDpjjWMl7Tqq

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_be626f8fa5aa5560bb5640e1bffec33a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections