General

  • Target

    2024-06-04_e5a5d4e8a02e86f276f17be25e10cdff_cryptolocker

  • Size

    41KB

  • MD5

    e5a5d4e8a02e86f276f17be25e10cdff

  • SHA1

    47c9e21c035cab422901f377855d19a497bbf8c7

  • SHA256

    893176a81c9438df8cc1452bd9df04aa7ff0a24967b06dba06b5dba1fc4f7230

  • SHA512

    b119f0ccde2e36b82444d9d5733ae3caddd35c4e82264d37429bc98b0613f2757bf03ada5623cba03b39756302603a8190b8a81343aea7a3dac78ba82a20e71d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/0Af:qDdFJy3QMOtEvwDpjjWMl7T0

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_e5a5d4e8a02e86f276f17be25e10cdff_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections