General

  • Target

    2024-06-13_84cf317b97808978fe858fa16c503211_cryptolocker

  • Size

    38KB

  • MD5

    84cf317b97808978fe858fa16c503211

  • SHA1

    619a2f35b004dfcee33d001a3044937d5f28611b

  • SHA256

    7a31188d0060836ff0734dbdad67f62f9f96ceb64af5aa1b550b7f6d2e0deef3

  • SHA512

    1b37c725186e88af85f97cbfb7d478756ecb98d8e95b471070e3ff9bc84fc44b0715a50094f4546a39686d47500932a22e43b934ba120d2ff945a4f3aa3bcc1b

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38:qUmnpomddpMOtEvwDpjjaYaQ8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_84cf317b97808978fe858fa16c503211_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections