2024-01-25_90fb74d75119f5552d70c0c7e372ee73_cryptolocker

General

Target

2024-01-25_90fb74d75119f5552d70c0c7e372ee73_cryptolocker
Size

64KB
MD5

90fb74d75119f5552d70c0c7e372ee73
SHA1

da6b26af47627083539edb8309b2aa8193839150
SHA256

268da40c0e5a0cdcf323e20a8815635e21a7099df74a565366a43d13340bb75b
SHA512

153a6fd17206cf822515640f5e09535845744b34538dcb17c0b6715132a43c20a586c68af25efbb777e160770ea68d2dbf2a24a8babe1234228d612900561477
SSDEEP

384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a3WgWRYp055TOtOOtEvwDpjqIGR5d:xQz7yVEhs9+4mR1bytOOtEvwDpjW

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_90fb74d75119f5552d70c0c7e372ee73_cryptolocker