General

  • Target

    2024-06-04_a8ca306d9c39360f25e37ca7e9d59959_cryptolocker

  • Size

    70KB

  • MD5

    a8ca306d9c39360f25e37ca7e9d59959

  • SHA1

    f5f0a9310b2e8e86a0a11d2412cc1cd8cc3c7a13

  • SHA256

    2d8cd9dc01d0a7f17e02b85345bd1d102765f3aad62ebb53c9669fa1c6bb3880

  • SHA512

    911e6bcad91c5bc82afb5459a9c9713eb509dcd04ee3f2a00dad9194137b3e88a00a232b1c744f16a4fafa45e714b2608594a6ff70f2c5c69fe77249a7e8c37f

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pl:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_a8ca306d9c39360f25e37ca7e9d59959_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections