2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker

General

Target

2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker
Size

93KB
MD5

6292e728ba1895464ce61c34eccd4d36
SHA1

09fb24f568776322ba95315eb1808aa01f3a5ea4
SHA256

5c20cebc6e2d19593aad56797121a324bf1f0d154042aa5b80a9ac5083ba708d
SHA512

68333a0d1ad9bfe817ed1361770a8d5c444cd480bb73d319b53d2f13fce6f99356f14406643e022bfe5064215f197170fb2dd6dc93e19a017fb28553bfc30cba
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlvODB:xj+VGMOtEvwDpjubwQEIiVmkxvEB

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_6292e728ba1895464ce61c34eccd4d36_cryptolocker