General

  • Target

    2024-05-13_6aaebb2d20398ba57e189a12086dd296_cryptolocker

  • Size

    39KB

  • MD5

    6aaebb2d20398ba57e189a12086dd296

  • SHA1

    5bfbb4c2ee19fc83890daeb1f879dcb304fcad7f

  • SHA256

    35c1d1743bc07597ec7646274e7dca70021bbeae9e8ff613d2d3ac39d141e128

  • SHA512

    2a8fc39f0b0e4b93688bda08feb2612dbde0343dcb6f17e869f33242641093c97511f64c82d14832f61d3a7a405c8d3ba2b0edd6326e36ff24911a91296ae259

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan/+F:qDdFJy3QMOtEvwDpjjWMl7Tdn/i

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_6aaebb2d20398ba57e189a12086dd296_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections