General

  • Target

    2024-06-08_13134391d549af256baf2896d3089433_cryptolocker

  • Size

    39KB

  • MD5

    13134391d549af256baf2896d3089433

  • SHA1

    64190373e7b0fa496614a1566e74402168e78422

  • SHA256

    87017c50dfd076c1b1ecd49c7511d40e5c361be81f3398ad39bdaf27d21b8624

  • SHA512

    c6c3e4e4de8c8237ec36492ba10e681db4bd648c7f76586efa823e7812f668f92cd92178f0635f6c016c3447c99b1d683207f633c3e36d07c0f44b98451a459a

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYv:qDdFJy3QMOtEvwDpjjWMl7Tm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-08_13134391d549af256baf2896d3089433_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections