General

  • Target

    2024-07-01_c1a27be6e1ac3d9a5c6589e5de24e586_cryptolocker

  • Size

    37KB

  • MD5

    c1a27be6e1ac3d9a5c6589e5de24e586

  • SHA1

    71d0e0edeec74eeeb0ce00e6712282ab24209886

  • SHA256

    c0645190cadb490a7c98c9f15e5738990b630441e8252ae4bd8018ae9b819186

  • SHA512

    31b05e5a4dcbf2f52d8f0b00936840841f6f7d60b55a7bb72ce0d77e1acaa6f06d1d8b40e40ef14b3706bd316b2fb6f4664ce7e949f06f41432fbed0d3ed308f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITZ:qDdFJy3QMOtEvwDpjjWMl7TZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-01_c1a27be6e1ac3d9a5c6589e5de24e586_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections