General

  • Target

    2024-06-12_209497ece0c62c76e647c75b1564df56_cryptolocker

  • Size

    41KB

  • MD5

    209497ece0c62c76e647c75b1564df56

  • SHA1

    30b0a039153f90369e4580c6bfbec040be66e958

  • SHA256

    6eb364720abb0ab2cdef76524ba45819444390f4080ee5c5f317adc16384e139

  • SHA512

    998ad84347fda19decd917ea990a66bfe54a58b17b1c1ab985bc4ba7d90a67d886e62c21f4e549ec63ee09a7289818ff15042be8ac2c5e6cafb817945f485bcc

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBWtc:qDdFJy3QMOtEvwDpjjWMl7TdUc

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_209497ece0c62c76e647c75b1564df56_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections