General

  • Target

    2024-06-15_26e400ffefea5c9899d17a4c5e7a16fe_cryptolocker

  • Size

    40KB

  • MD5

    26e400ffefea5c9899d17a4c5e7a16fe

  • SHA1

    87151ce483bd16f7edfad8e4484b3ede792e81fb

  • SHA256

    4b0c6d1da762de3643a61c8aa6c9d8d7668a6ad054f57e4e669572782bda8c00

  • SHA512

    23c72f60c56155e5db3938acc718e086138aad2548862e13c0735aa2cbaee9002785f9c67fd149b6aff6e10540dd823d7c8562e8f6a0b4cf4dacd6c77063e525

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY95:qDdFJy3QMOtEvwDpjjWMl7TS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-15_26e400ffefea5c9899d17a4c5e7a16fe_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections