General

  • Target

    2024-06-12_6af287ac147a2935968ac1c60d5546f1_cryptolocker

  • Size

    40KB

  • MD5

    6af287ac147a2935968ac1c60d5546f1

  • SHA1

    052009a1a39a5e0ed233ebe3c4ada1bd36ea4ea4

  • SHA256

    8356bf9fe35d846bc2d1f126d13ea418127edf11b1a54dd41d89d602ff5b0c9c

  • SHA512

    e2c5227d40f789eb80dc2ace60f7131a5be2fb953fe7bbd58d71a09b7706a66f660b74cf643af28031fbe481a97327f6d5fd2afddf44f204c96bf7c30fbdbcc4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX54R:qDdFJy3QMOtEvwDpjjWMl7TP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_6af287ac147a2935968ac1c60d5546f1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections