General

  • Target

    2024-06-03_df266e22cc9d98e74cc4ce882de00a87_cryptolocker

  • Size

    40KB

  • MD5

    df266e22cc9d98e74cc4ce882de00a87

  • SHA1

    d819f1793ff5bc2794edaca30d339731828b96c7

  • SHA256

    8cafd9770d82b1eb3a57cd91180d35256123c80535832ed845f80564f9c35070

  • SHA512

    c7366e4a6b289007e3c2fa8839aa3cc23f88211873b78bb00120468de91dd325d07a501aa7d6a5b78d43c92157301f361b634dff59816467e4b48c1ffe45463b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBJE:qDdFJy3QMOtEvwDpjjWMl7TdM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-03_df266e22cc9d98e74cc4ce882de00a87_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections