General

  • Target

    2024-06-02_b22929d415babbd3232abcf27051c3f8_cryptolocker

  • Size

    39KB

  • MD5

    b22929d415babbd3232abcf27051c3f8

  • SHA1

    1497084adec53ababae2ca444896adabb4fbd9b2

  • SHA256

    ab42ff9da9f39be22b8196634367d23af7396a6fc4a8e54026edf5c8e3b89ddc

  • SHA512

    01caf6ff3b72be997b6f9039bb26dac219cf63deea5d2849a8f0cb51b69adf3ed0fe92fb3182a46df9eaa08a5be78e8ffc5608a9572863451f8f58d73d3c8969

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDHU:qDdFJy3QMOtEvwDpjjWMl7TdM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-02_b22929d415babbd3232abcf27051c3f8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections