General

  • Target

    2024-06-09_6f8fe7c0a00b391c88a56b3df299cc8e_cryptolocker

  • Size

    38KB

  • MD5

    6f8fe7c0a00b391c88a56b3df299cc8e

  • SHA1

    d250c9331d8f0bf46fcd46eebecbb4aea94e7c80

  • SHA256

    2fa1ef53ded5165bf43005ba7c922946a4e1d9750084b47d2804841f19f7f6c5

  • SHA512

    5b0f5e21c0e2a3ea1eea2ec5817b9c7ef7a90f3e03f6bbdebd53090249b7a53ab908f351f13205704e67c2f17cf39a5a6d1c7fa97d0a837261a186462793cda9

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBsO:qDdFJy3QMOtEvwDpjjWMl7Tdt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-09_6f8fe7c0a00b391c88a56b3df299cc8e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections