General

  • Target

    2024-05-25_acef249b0b12f7938cf0f0aa2829d829_cryptolocker

  • Size

    40KB

  • MD5

    acef249b0b12f7938cf0f0aa2829d829

  • SHA1

    365a955329259efc886740bb14818d08760bc216

  • SHA256

    57fcc1244369890f926ac56e7d4c4810096fa0503fff621d135a6d3591dcc7b3

  • SHA512

    31f89a92d29c9c875cdbbde810f3a6482a5f8ae31e0266f331646f50b8d3a7b1367189920523935a823946a816176827b293da522e6e7073b80436681db9b0f6

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYo6:qDdFJy3QMOtEvwDpjjWMl7Tl6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_acef249b0b12f7938cf0f0aa2829d829_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections