General

  • Target

    2024-06-08_616f37d02e2f82d1bb4cc35b916297f0_cryptolocker

  • Size

    40KB

  • MD5

    616f37d02e2f82d1bb4cc35b916297f0

  • SHA1

    2c8bf8bf80e80630c68fd65dbb65a1fc7e7c60d0

  • SHA256

    3f499b08acae15d76444355e912c35ac66b68d43fe8edc10cd82f3100e174f33

  • SHA512

    9d8b6759a442b0fab888e0caa970c480027e2fce40a8e50702734e5e83e4fc29f9f8a02a7237549dd4abe64392e63ef51e5f279db293d4ba315140c7d6fbff3b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9XZ:qDdFJy3QMOtEvwDpjjWMl7T6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-08_616f37d02e2f82d1bb4cc35b916297f0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections