General

  • Target

    2024-05-31_3ab0a0a81e578411cc4ef2e7a46071d8_cryptolocker

  • Size

    40KB

  • MD5

    3ab0a0a81e578411cc4ef2e7a46071d8

  • SHA1

    130f9042b03af33425fd11016ca831e1ec4262cf

  • SHA256

    266fe259695b11f28ad3446863b407aa42337dd9170960a5e183b7c0daaf419b

  • SHA512

    02be898d372c57847fdfd71bae010b6118c4d983a86e33ca4effb55eabf499a97a9058e90f84173b5bd44b3559744e914c30562a07681acfcfdd72df8a16db3e

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYfFt99:qDdFJy3QMOtEvwDpjjWMl7Tq9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_3ab0a0a81e578411cc4ef2e7a46071d8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections