General

  • Target

    2024-06-11_c9d8d1796906210f24615cdb61431dad_cryptolocker

  • Size

    41KB

  • MD5

    c9d8d1796906210f24615cdb61431dad

  • SHA1

    bb09c3e768caa0d3e4ee574e0e07fcf7f57b6419

  • SHA256

    16990c0ef329bae4ce15d460b86e7f4858c7f4ec022ae272e08b29dd5139cdf3

  • SHA512

    0e28080443bf75b3405967a59887c70c8bf2b450bb815e46b0f8bf8525f3c36fd17d4c9ac239518aec204f06108f9102c796f28a9b7e39ea3cb1315d51ff9440

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/0G:qDdFJy3QMOtEvwDpjjWMl7TC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-11_c9d8d1796906210f24615cdb61431dad_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections