General

  • Target

    2024-01-24_ac65082037b8938064de78d42a6c9568_cryptolocker

  • Size

    34KB

  • MD5

    ac65082037b8938064de78d42a6c9568

  • SHA1

    382c16ee4dd218471292622f11be968bd6627fef

  • SHA256

    8ed70a2a1574e2415f3d4d337adb8a40c4e2a6c63076ee3aeabd30c643e5bd70

  • SHA512

    f5291cc1fd2e9d35623b9778cbd658dd34b975871b28e7ef068dfc928684c2600b9251ee99b1dbcee21d6f70dabff9d11da5ba6d5023429243392a241f15b2cf

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axB:qUmnpomddpMOtEvwDpjjaYaX

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_ac65082037b8938064de78d42a6c9568_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections