General

  • Target

    2024-06-03_25d1ff7d4093a3e5c02fc919246a6f24_cryptolocker

  • Size

    40KB

  • MD5

    25d1ff7d4093a3e5c02fc919246a6f24

  • SHA1

    e224293b70289d2f43573cf95927b620be6092ea

  • SHA256

    51c4ca3c545f7932d62137dc1af1a41d4c50b0bf31bbe2a84e2c4c2631b9bff7

  • SHA512

    f36fa123e1bf88215a5231a82d6a01b7eea16e6c1b78b0e157256fa48fe782ee3866c94981ae1435f2b14240f4a643599b6976f53b05aaaaa0e0b173bb72df53

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBW:qDdFJy3QMOtEvwDpjjWMl7TdM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-03_25d1ff7d4093a3e5c02fc919246a6f24_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections