General

  • Target

    2024-06-06_ab03e892c9e48785b299b27e20480d91_cryptolocker

  • Size

    40KB

  • MD5

    ab03e892c9e48785b299b27e20480d91

  • SHA1

    6302840d09b6f40fbbab289a292c46fb50f26b2e

  • SHA256

    f46ad9ee8c125cf475d6567d2b579200f6a2d7f29f90eaeb9ff5f268ea651dbe

  • SHA512

    f90bdb56263f1109334f4ef41801bfbb060fe09829d4807bc78f28ed886d52f05ec57f5f64d6d67f4b2d4839d4ec92c59e8439534cb3185911b759b3738682fc

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaBiDe:qDdFJy3QMOtEvwDpjjWMl7TdADe

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-06_ab03e892c9e48785b299b27e20480d91_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections