General

  • Target

    2024-06-01_1ac30f870574d3bef484d671d11413ae_cryptolocker

  • Size

    71KB

  • MD5

    1ac30f870574d3bef484d671d11413ae

  • SHA1

    beea14b23d6d737b3de447a08f2f44b48fb50f4e

  • SHA256

    52bb9c3e72e991fe28de0a3cb568c9e0bb8856727830bb75a99f092fb9804611

  • SHA512

    b15e8c163d7ba23bd5351c01f22eddf3a1263c8c55b597cfbca4b5c71c92eefc90524e38b8c2418e4edee47fbb72d05677e16c1e79dc4c4b31a1212c32ce7167

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95OJ:C4Q2c94OtEvwDpj4H8zr

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_1ac30f870574d3bef484d671d11413ae_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections