General

  • Target

    2024-06-05_104561f049cfad84a85a2afcddb3aa56_cryptolocker

  • Size

    40KB

  • MD5

    104561f049cfad84a85a2afcddb3aa56

  • SHA1

    143e01041b6b4a38548886262c0d96e44d5a1c02

  • SHA256

    a8c9e8ade60a1b6ca8b57f87817ecec9fd961712b9e97c6560e7ce05698a2f42

  • SHA512

    30b73251e02481a91897dd7ee38007e61ed9a430856ea282f206f0279b4fb0a733d12ac91cdefaebef9179447d9614cd71462d2872d8defbee8c64f9ba1aecda

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBU:qDdFJy3QMOtEvwDpjjWMl7Tdu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-05_104561f049cfad84a85a2afcddb3aa56_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections