General

  • Target

    2024-05-27_bab1b5d1276a232d115c3cff2030b0f7_cryptolocker

  • Size

    39KB

  • MD5

    bab1b5d1276a232d115c3cff2030b0f7

  • SHA1

    d67304c098b1753ef8ade6addc62e119a67ee13f

  • SHA256

    2386a518d552f9d29083039dbda6bc7ff47722c94f3fd766d96a8bbea021eb9b

  • SHA512

    46295a3db6a7553690cbd54d31aa9cd7780c0b43e063fbf2400ac7bfa64cb27f2846b00ff825415a75326790c49db77da844e48c86a66845081ff8e90b59b41d

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaA:qDdFJy3QMOtEvwDpjjWMl7TdA

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_bab1b5d1276a232d115c3cff2030b0f7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections