General

  • Target

    2024-06-25_5fc8a50bf93bf29c60bea19996f3c9d4_cryptolocker

  • Size

    36KB

  • MD5

    5fc8a50bf93bf29c60bea19996f3c9d4

  • SHA1

    ddb355fbbe8bf1399f9f10d065b0aee39c522ff9

  • SHA256

    366df35abaa73510e0f75584aedd5cf5640c49dae66b2d1e01bd63847e4ac07b

  • SHA512

    5b154db8a97087425a74f1a56b53162d77c1c4c2aa13a810bc39c3c4aba21c3432b39486c2e4da30429758327d079452b488007c71f96154ac134afba7a999d3

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITZ:qDdFJy3QMOtEvwDpjjWMl7TZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-25_5fc8a50bf93bf29c60bea19996f3c9d4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections