General

  • Target

    2024-06-06_bc48f9b2238969f7d642f211d35b9b33_cryptolocker

  • Size

    74KB

  • MD5

    bc48f9b2238969f7d642f211d35b9b33

  • SHA1

    b74486845e2045bd01e652defae78dda74478b6f

  • SHA256

    6f2f924a627f49cb184ed94b77cf8b217576f15dff7fca6cc36be9ff8c883941

  • SHA512

    b8f9e2e23e2ed2ade921980d29f4b4582aad93554f0e36b49db5a67e973e17150c430bdcab971d5b0cd3cd04006a15fb64c5f69b77c51f3c8ab3b5430048bcc6

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95bi:C4Q2c94OtEvwDpj4H8zl

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-06_bc48f9b2238969f7d642f211d35b9b33_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections