General

  • Target

    2024-05-26_fbab4438bcf507e3dabe57c8815cd582_cryptolocker

  • Size

    89KB

  • MD5

    fbab4438bcf507e3dabe57c8815cd582

  • SHA1

    d8722454bcc0fa309b30fa359ee08f2f4ac59b52

  • SHA256

    4f4a4dadd6abf0a8d5ac1fccb0458e413f6fb9668e55d589a29a26d96f5495a5

  • SHA512

    8dd600b2ad3bc482a287dc8e88408542830b4f879335e558f9f79410883e2869c728de30c80b8ad74a2795ae73bb25f0a2a81da34f3b933fc0b5d48ebece3570

  • SSDEEP

    768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODa:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgg

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_fbab4438bcf507e3dabe57c8815cd582_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections