General

  • Target

    2024-06-07_b5a1d95f8759788f0d9fe46653f69d74_cryptolocker

  • Size

    40KB

  • MD5

    b5a1d95f8759788f0d9fe46653f69d74

  • SHA1

    2b57d3e13a7ff0cd7ccc439d6d6ebd309c95ffe7

  • SHA256

    d51509f1ced11396981e869db3818dfbbdd3c2e2cb98d2a4b0c59cf5b37d9c30

  • SHA512

    55bbd8e52e87316b076f5a8e85bced51a84b003e98aee03007ee5d59a533bba6d93caafe32b06e0534351c80e8a0b438ba1aaa137f6b40e69a5278e677b613c1

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX54W:qDdFJy3QMOtEvwDpjjWMl7Tk

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-07_b5a1d95f8759788f0d9fe46653f69d74_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections