General

  • Target

    2024-04-26_cbafee2726544aa346292a8fb279a755_cryptolocker

  • Size

    38KB

  • MD5

    cbafee2726544aa346292a8fb279a755

  • SHA1

    01395791384f99112a1b4fd6a0dbcf480b4d02ec

  • SHA256

    bdc418b1694e77bb845e740aef85127ad4927a0c903a8499293a83f53d2480e5

  • SHA512

    b901f53e7dc8efb14bbed6c6e6dd3109af5e162749654f95eb75fb97f57695dff0bb80a25d9e2724256c04b7e22c0b28b9879ee0536cbfe40095383e8b18a12c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY9j:qDdFJy3QMOtEvwDpjjWMl7T8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_cbafee2726544aa346292a8fb279a755_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections