General

  • Target

    2024-06-16_0f236c62956e8332f6e358d01be7fcc8_cryptolocker

  • Size

    40KB

  • MD5

    0f236c62956e8332f6e358d01be7fcc8

  • SHA1

    c27c02d7ffa65bbafd2ede15adcfd33e7509b360

  • SHA256

    ae8c48ab082b6519034877c7425a9edec650fb50541f1d3201c1ee34d1a03a10

  • SHA512

    be01d98a9c3afe9d02d3d434f15950c1579c07cc25c29486edda727481bf07ee794e83a8fddba44958e6f33f1938dbc1c6a01795278cf4e77700b529edc0bf6d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9ht2M:qDdFJy3QMOtEvwDpjjWMl7ThM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-16_0f236c62956e8332f6e358d01be7fcc8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections