General

  • Target

    2024-06-05_6e22d5d0b7f8487711d1b18519dc9a8f_cryptolocker

  • Size

    69KB

  • MD5

    6e22d5d0b7f8487711d1b18519dc9a8f

  • SHA1

    f385c386415989e2fbbd676ee88fad4e0882f052

  • SHA256

    d01ab961a71af0ae7aa4d40b49be5ef733b3986be2aeaf8e3e02b3c857b22f30

  • SHA512

    1665903c1e3510f22a5e7b185c58c3760d1041936881fa8a881c3daee627021d95b359a90bd3c55f289a01c36a35e06bc186d73138a4188a82f5cdab2e2ec2b5

  • SSDEEP

    1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQApjw:78SEOtEvwDpjWYvQd2P+

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-05_6e22d5d0b7f8487711d1b18519dc9a8f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections