General

  • Target

    2024-06-01_ab8c38c4ead053b7e92edaaa51557aa8_cryptolocker

  • Size

    40KB

  • MD5

    ab8c38c4ead053b7e92edaaa51557aa8

  • SHA1

    6eb94382c2b99b402a63b1525e41268c84c4385d

  • SHA256

    d05cbcb7d2cd125e9695d11ea0c3c01d1d959b5eac9c866e281f2644f9864c09

  • SHA512

    da008492589b84941120265bae311f7c7750b0b2d59f4d3e2a675c14c57f2dd59689c64ed001baa1c703e8207155b9de379d034f837b8579c4d2ceee5d0e0635

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYi:qDdFJy3QMOtEvwDpjjWMl7TT

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_ab8c38c4ead053b7e92edaaa51557aa8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections