General

  • Target

    2024-06-03_527e58abe3f3d28570f5c336d4d6e9d7_cryptolocker

  • Size

    40KB

  • MD5

    527e58abe3f3d28570f5c336d4d6e9d7

  • SHA1

    81f5791dbbb6221856bd65d8b0da4e1e65321a20

  • SHA256

    9b7d89c17ef420373e2c4e2da9b63565020cf19d7899255bb518f6737f328b21

  • SHA512

    acf3041ac99fa3ca81f8c8ee9ccbcac24cec257d75f6336e266fbd1aa5097c2da1227bf55f32ff191e119fef7d14ac7e4e7b8bed267702ba3f1c33dd394ec713

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBc4S4:qDdFJy3QMOtEvwDpjjWMl7Tds4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-03_527e58abe3f3d28570f5c336d4d6e9d7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections