General

  • Target

    2024-06-07_50b3072bac952d7735ef1cebc51f8a68_cryptolocker

  • Size

    40KB

  • MD5

    50b3072bac952d7735ef1cebc51f8a68

  • SHA1

    ed5d3b701ac275e5480aa3eb2c8d6ff190035de0

  • SHA256

    61ec2183955131f7d99490fa51b9d8648219bb7613b0e43a809ac842074d4ee5

  • SHA512

    c53a1f4e328a9a93d04957079c1e5b4969b2f5154db15be6bbaec4335a8d28508b5b191bff60dd8ea12c3fc70abb429e068d049d75ac7e6e5905279b6ac26089

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbP:qDdFJy3QMOtEvwDpjjWMl7TdD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-07_50b3072bac952d7735ef1cebc51f8a68_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections