General

  • Target

    2024-06-14_84af0ff93fd2f12d0fc3673e5c9395cd_cryptolocker

  • Size

    41KB

  • MD5

    84af0ff93fd2f12d0fc3673e5c9395cd

  • SHA1

    2bc3efea2b7ea784e5af3555e6bb5645ac89d55f

  • SHA256

    5f7064e00ccb92145d0424644a80517c67a392cba159e90d961fc24c3e710c69

  • SHA512

    3fc657b4f085956380a8e6a57f0a0281471c9ffdd452619d50c97fb12f8467939e4dd9c179e9f5bfa3a0e2b9b91a658deae9b35d4e8a5a73f9da3ad54e039ca5

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfC:qDdFJy3QMOtEvwDpjjWMl7TYC

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_84af0ff93fd2f12d0fc3673e5c9395cd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections