General

  • Target

    2024-06-13_debfb409c78381183c3dd753e5677ae9_cryptolocker

  • Size

    73KB

  • MD5

    debfb409c78381183c3dd753e5677ae9

  • SHA1

    8d8089edecb8645c351766cba8253e1e0bbc619a

  • SHA256

    e262320daf1b00ca4e52a86ca2c29058ef8c310bfe794ba64a6967f069a4d0d2

  • SHA512

    854a0a15ce7da8c999fda71b667f54b70c2ae75bb57dc833b9a720f70afd69e837fa0dc058f13d76e7d57bfcbac0e09e7cb63619a4adb55206e737888c00b403

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9738:C4Q2c94OtEvwDpj4H8zx

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_debfb409c78381183c3dd753e5677ae9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections