General

  • Target

    2024-06-04_e591c4c2def89f73e78ea25c2fe6e575_cryptolocker

  • Size

    69KB

  • MD5

    e591c4c2def89f73e78ea25c2fe6e575

  • SHA1

    92da39ebb64e2cf8b1641ea0def1fcd62860d7d3

  • SHA256

    c1f246268b22dadc29e2bc13a96d16dc410c66a67f31a881a29462998fc6024b

  • SHA512

    587aa79bfce11e4bcf4c0413f354b35f0a095ab6c47797d4288effea2fabf34d6870899355c52bc3a0bbcab1a271c67de0bbf92b17f04b721d0cd5e109a4f155

  • SSDEEP

    768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Ph:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-04_e591c4c2def89f73e78ea25c2fe6e575_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections