General

  • Target

    2024-06-12_49b98da54b135d4136baac096372e913_cryptolocker

  • Size

    40KB

  • MD5

    49b98da54b135d4136baac096372e913

  • SHA1

    6c5fbf5857612edd2eeeab49283097925e0d401f

  • SHA256

    10d8e897398ec69a1a1fd28915e698bc4fa3f5a35d46c1048ac37ca40569fa68

  • SHA512

    cdd132f85e6fd2d0e75fe058d5bd0fc191f7f452299bf7c0ed8f772f019d734692a3faa23ece745b13cd1b5af95914d5cf358ad6bfa68de5736f71e2c2399f3d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbF:qDdFJy3QMOtEvwDpjjWMl7TdZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_49b98da54b135d4136baac096372e913_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections