General

  • Target

    2024-06-02_5065b7a9b4d5f9692b98b32635d04066_cryptolocker

  • Size

    41KB

  • MD5

    5065b7a9b4d5f9692b98b32635d04066

  • SHA1

    a1b62477bc42beb7724c6cbac5f8bfc94d271e44

  • SHA256

    96dbd2e55b07b2ae915ca4bc145b46ad9e746633b47c5a72c6f29bcc83838067

  • SHA512

    6870c4355252011a7e6c58c3ac994d4e788e7eefd02ee78728b8034b547838168b9c0640e3b12d47f5bd0618dc2cb1ce0a1fb37a5aac47b312c10426119e7581

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYljK:qDdFJy3QMOtEvwDpjjWMl7T6G

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-02_5065b7a9b4d5f9692b98b32635d04066_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections