General

  • Target

    2024-06-09_675f4393aad845bf87b8335495bd5777_cryptolocker

  • Size

    40KB

  • MD5

    675f4393aad845bf87b8335495bd5777

  • SHA1

    8c4c9e61a98bcbae01a30a0c08a5dd0cb491ec68

  • SHA256

    0d632031e43415f4599dd5b33d6168788921826f514cae90cbd6aa767a561daa

  • SHA512

    8d6adc9f65aa04743a7f8e7b8d4cc21cbc44eeba72af6e3b3680282a46f9c10c4c046dbf830362d07b95dc3bd05bf9a2286b67fc289bd8573684ab70e5f74f5e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabD1l2:qDdFJy3QMOtEvwDpjjWMl7TdN4

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-09_675f4393aad845bf87b8335495bd5777_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections