General

  • Target

    2024-06-15_d120c83acf2d3071fa34cc9febde749e_cryptolocker

  • Size

    41KB

  • MD5

    d120c83acf2d3071fa34cc9febde749e

  • SHA1

    caa9543559a9398aa57d0d113ea8eac17347c128

  • SHA256

    68a8d55be6942b5ec2802c6f1396d854e25d35f7ee6df96e3859ecc44402a76f

  • SHA512

    adf3c596894f3c2aceb85bc53fd6d0c2ad53294e60c75873ec1992c574e2aa77ab09e8a08e69acd949e6b3e4e6bdbdf45286e23f4a26320a16d0b6bcf156cdbb

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9hf2:qDdFJy3QMOtEvwDpjjWMl7T82

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-15_d120c83acf2d3071fa34cc9febde749e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections