General

  • Target

    2024-06-13_cec387831bf3f4f0a0125326a5b22ab0_cryptolocker

  • Size

    74KB

  • MD5

    cec387831bf3f4f0a0125326a5b22ab0

  • SHA1

    714a3f897942f6f965caf203ea633a27689e5683

  • SHA256

    c06008361c1eb3a6d66586a702326ada75361cdfc0f9b45ae660d1e2b346ebb0

  • SHA512

    4465efd77fbff8bd7773e0200e8a1b40745dc065740c0f3a5a29f0f86f7137f5ce1fc5132dfb2f99f8954c5bf1f8be66f529ccaba139119fe9599b34fbb92667

  • SSDEEP

    1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs95bD:C4Q2c94OtEvwDpj4H8zw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_cec387831bf3f4f0a0125326a5b22ab0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections