General

  • Target

    2024-06-24_9926c7a281054db2f1fe49fb8332d172_cryptolocker

  • Size

    40KB

  • MD5

    9926c7a281054db2f1fe49fb8332d172

  • SHA1

    43976503f7303c8e1df6256ee316322cf8500dc4

  • SHA256

    1ba238e2b84d70255ac4fc15e464360e7fa8f5dcd38b3d11917198e3bf51acf9

  • SHA512

    b0f17fbd1e1ccac07922cc80449e75c2c9f0b2526d7de117e0ec1fd4e8cd61837a55b26a47283e03d0a7623009423b66fff1b94f9d1e5d14b196915e8360cce6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9S2B:qDdFJy3QMOtEvwDpjjWMl7TZu

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-24_9926c7a281054db2f1fe49fb8332d172_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections