General

  • Target

    2024-06-06_2fd7a8254cc7b31435ddab0b83b20a80_cryptolocker

  • Size

    40KB

  • MD5

    2fd7a8254cc7b31435ddab0b83b20a80

  • SHA1

    b7b4f25007ae290cacc81af15a3f2b1e10f83805

  • SHA256

    962692eb3682f58b90940944dfb7bcdd4a8c4c99bd722174dc09914e0fd628ef

  • SHA512

    4153fe2bbce44a36a618c28b74bd67521d6159570653ddb3358724854c4c0cc941546cddd4001e392ab632d19d9bfd9081eb982eb869c20507151500cdf5b247

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan/5:qDdFJy3QMOtEvwDpjjWMl7Tdn/5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-06_2fd7a8254cc7b31435ddab0b83b20a80_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections