General

  • Target

    2024-06-14_4a0d29cebe04656db09542568e11026d_cryptolocker

  • Size

    41KB

  • MD5

    4a0d29cebe04656db09542568e11026d

  • SHA1

    27311149070160fbb0d66cb29e7f672b9d3e7062

  • SHA256

    630b844e2612713edecdffaf1ce9d53a594580dd5e49b0365abfb05206515c5f

  • SHA512

    b4ce1010e15eb636ca9c318041d77c92d4a8a2c8422d845dda9e052b372065b2a0248fe17af46ceae3bf84b5d2e36673da3a57834a28899fceb9e6bcbcc7cf8c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfh:qDdFJy3QMOtEvwDpjjWMl7TYh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_4a0d29cebe04656db09542568e11026d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections