General

  • Target

    2024-06-02_f67b3ad32ac12e309598a4c41204dcf3_cryptolocker

  • Size

    40KB

  • MD5

    f67b3ad32ac12e309598a4c41204dcf3

  • SHA1

    ee35dc08970ba6ff692153e09dc846c8ee6bf2ed

  • SHA256

    2577f177004880bd84f8c5a04435c2f45adfa1a3edf231d733f270342848006a

  • SHA512

    1ac90c03a73c08df95ad6eaaab37290054052a900ee4f407b20edc4586b9d16e938877ac25c9e4c49c3688dffdf21653d93e0dbd7f9f2c561520db8ef6e26363

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9S:qDdFJy3QMOtEvwDpjjWMl7TZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-02_f67b3ad32ac12e309598a4c41204dcf3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections