General

  • Target

    2024-05-11_acfb6e39b3d394b37a597f26f485a129_cryptolocker

  • Size

    39KB

  • MD5

    acfb6e39b3d394b37a597f26f485a129

  • SHA1

    30b6d9f09dea603fa7268ef923e807af03fe76ed

  • SHA256

    ad8d50046a873df7afa3b35a0669afdbadc2b91a1e75428faafae3cadf0f201c

  • SHA512

    ab1c545ca1bd2832bcf7e9a2b48cae73c6dddc1e6de19fdfa0e4e51306779f9cf9aa7d96506f21ccbb4623e52e2e490f6b6b5e2284973bc04fd8f7a95079edfe

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITY/J:qDdFJy3QMOtEvwDpjjWMl7TU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-11_acfb6e39b3d394b37a597f26f485a129_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections