General

  • Target

    2024-05-27_af31ebc1273dc26c1e496bd63da296ac_cryptolocker

  • Size

    40KB

  • MD5

    af31ebc1273dc26c1e496bd63da296ac

  • SHA1

    65f238be172c7cd6a5b2e3865a92b1335eb8084b

  • SHA256

    905f359136c035e0e2f3eb21a8c4376808ac33776ddbcd28abe80c44f791d6d6

  • SHA512

    e1bb7c73864ee439512a34b726ec686b51691d45c3a6e01ee68d8e01b85516ae120b105aa3e077e1b840bf67427135a19fd92a2d98164461ce82f63824c369b4

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYan82:qDdFJy3QMOtEvwDpjjWMl7Tdn82

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_af31ebc1273dc26c1e496bd63da296ac_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections