General

  • Target

    2024-06-02_c99f8a1bec08c51a66b69bbfeca2f434_cryptolocker

  • Size

    38KB

  • MD5

    c99f8a1bec08c51a66b69bbfeca2f434

  • SHA1

    ef89ebacb9e68599ef76000ef03c8c0b9e853528

  • SHA256

    fa5d274a534cb0e22fb07121c4da878b4d012c3ac50e1fcf433f4ab3faca0c80

  • SHA512

    57b53272e17b554a47ef349fc9d110ebb3efd507d870a8b183a2cfd41fd67d48183f9b38551d4fc0bab21331961631a3ff21886c713f08a620fa8e0941a6d2d0

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38n/:qUmnpomddpMOtEvwDpjjaYaQ8/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-02_c99f8a1bec08c51a66b69bbfeca2f434_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections