General

  • Target

    2024-06-04_dfbb5dd53699e473836be365078b7c40_cryptolocker

  • Size

    41KB

  • MD5

    dfbb5dd53699e473836be365078b7c40

  • SHA1

    94d24cb8fbf4d0dfc95e2f2b2a40e532d785c094

  • SHA256

    a732ee207dad2b9adbb0214ce1a57c7c960306c6785783ef626e50fce3b1aa09

  • SHA512

    ef101495b735f768e1314302cfcc24d1923320775e4280c400a81a7751ec338acff6d8fa95f2aada6c2621e0b2083f957ce4337b07900e72f3a3821b59a20a38

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYp:qDdFJy3QMOtEvwDpjjWMl7TM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_dfbb5dd53699e473836be365078b7c40_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections