General

  • Target

    2024-06-03_f216070c423924bf42e16f09d0d90247_cryptolocker

  • Size

    39KB

  • MD5

    f216070c423924bf42e16f09d0d90247

  • SHA1

    f0ffee945a152befd0f18c6728fced2ab40ed6be

  • SHA256

    49c4a5cbdee9b848e1aa3ee8e3a81a32253e1c3c90aab4eee4283fa6d615a8af

  • SHA512

    5ba803d4b40ad098ccc2b6ef8465686f0d23e9b70af9ed6bf255ed3f0a2ebf1df98be53427abf4c11831149bec10f8617f362225642eed07bd35daaf6a2142a4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDB:qDdFJy3QMOtEvwDpjjWMl7TdJ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-03_f216070c423924bf42e16f09d0d90247_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections