General

  • Target

    2024-06-05_b491b2ed995b4dc2f635fa4bfc109c07_cryptolocker

  • Size

    40KB

  • MD5

    b491b2ed995b4dc2f635fa4bfc109c07

  • SHA1

    f61561829b380de4f4c61e9c04c7b70d799df398

  • SHA256

    f89c1ff8294f8bc1f47310cdcd324bd5186f85ee04aaaa5b861b52c25e6df3ad

  • SHA512

    afa1a9b188566d35b5acbecc97a5575cfc13e3bdc9e96cbe5f3265c9f105f3739dddf8ee497456bac44e64f1c5e288409f370f7209411ec478d7b4f022248fcd

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBDt:qDdFJy3QMOtEvwDpjjWMl7TdP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-05_b491b2ed995b4dc2f635fa4bfc109c07_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections