2024-01-25_98ac9246a982148d52291b142854a349_cryptolocker

General

Target

2024-01-25_98ac9246a982148d52291b142854a349_cryptolocker
Size

64KB
MD5

98ac9246a982148d52291b142854a349
SHA1

fd8977e44531962b457590a737c68361bb5bda99
SHA256

9dd7f8c80bf06fd0b84c00759049dce8b201517920a219e227b0cd11f727e6a2
SHA512

50e3f5267544a44a780493a0e5f922762dff477606cf691ad063fdce728849b2f319398ad7eb8551306106683ac35bca2152bc9e39c343d3ebbbda84c85b885b
SSDEEP

384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a3WmdRYp055TOtOOtEvwDpjqIGR5d:xQz7yVEhs9+4jR1bytOOtEvwDpjW

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_98ac9246a982148d52291b142854a349_cryptolocker