General

  • Target

    2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker

  • Size

    39KB

  • MD5

    3acb03055347d54be2378309fd803f1a

  • SHA1

    c28a95780d0b7d0873e6da2cba8e00fdb9bd213c

  • SHA256

    baa357e6b7a668181cd00fe40c4c1b6562e33861fc38bc2b3e46d09f51ab11a6

  • SHA512

    a85f07e17ff1f11d763ea20c83519c3229101deb8c512568ff21990f1a3589c2e01c3ba6b48dd95c3c2d6091b2dda8a73f575253e604564b9773e352b7199a21

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX6:qDdFJy3QMOtEvwDpjjWMl7Tj

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections