General

  • Target

    2024-05-13_a6d79c2900928bf4fe7079cb82ae1291_cryptolocker

  • Size

    39KB

  • MD5

    a6d79c2900928bf4fe7079cb82ae1291

  • SHA1

    3a3f04c62c56575ab436824dc97137fd2e86e11a

  • SHA256

    be9df8295d3df8d0b4622cd7ca9676277a02c553aa54325228555e014ce91c6b

  • SHA512

    26bc34726c6ca0f6409103c78f1aa8099f073a17134c22a9d6c28dbb7439b7db6bace7604ae3802088ae73f8d186601188646830b8f1b5f9587a4a9063d65a6c

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfF+:qDdFJy3QMOtEvwDpjjWMl7T9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_a6d79c2900928bf4fe7079cb82ae1291_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections