General

  • Target

    2024-06-14_2818ef2f5c3e4411006b3022d2106b08_cryptolocker

  • Size

    40KB

  • MD5

    2818ef2f5c3e4411006b3022d2106b08

  • SHA1

    12c6603f977f76a4aef693876c17b08e7584f3d4

  • SHA256

    6f423108fcccdc9d90888e890db1b0b22f30635c3a4622487a5dc53f5baa411f

  • SHA512

    d971b0d00915244354dd505da5ce771f80dd041e886c511f3e4d31b06a6c75f371a2f250bf27da03b4496ace12fd5aeb42b9b3fe79c9ac56403bd6eb1cd9740b

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan8Nz:qDdFJy3QMOtEvwDpjjWMl7Tdn8B

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_2818ef2f5c3e4411006b3022d2106b08_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections