General

  • Target

    2024-06-19_28db5c4b69c519c753f8c767115f9d30_cryptolocker

  • Size

    35KB

  • MD5

    28db5c4b69c519c753f8c767115f9d30

  • SHA1

    37af24c430794f2a6957f3363385dd8402f93243

  • SHA256

    f99dbc5353fd7af74f998b72e895507e98a6e269c3f4da9643315ebc56543022

  • SHA512

    b651f99f5796f5fa40256ea8bd74917d3b539454cd285870a9f33d5b8273635a96503238dc3e0516b32234f4a11b0bf4f7fa8f871afe0dd7a2fe289e4a26f7e7

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITf:qDdFJy3QMOtEvwDpjjWMl7Tf

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-19_28db5c4b69c519c753f8c767115f9d30_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections