2024-01-25_4d42244e03a2db90c9fda2d7c6c8bcf5_cryptolocker

General

Target

2024-01-25_4d42244e03a2db90c9fda2d7c6c8bcf5_cryptolocker
Size

56KB
MD5

4d42244e03a2db90c9fda2d7c6c8bcf5
SHA1

a5cc536e38760232877c6911ccf11fa476df25e1
SHA256

8f56045c26a9223c129cf8294a9b65001f56b070ae85cfffeccf02eb3c50981f
SHA512

d7fd23f010967b5c712931720d51d30145d04dda57225e3b230e86334bbf93f5611e166f46d5363627c37e5880c6e552dfc5868818452c9a243d1112358561e7
SSDEEP

768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5appO:z6QFElP6n+gKmddpMOtEvwDpj9aYae

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_4d42244e03a2db90c9fda2d7c6c8bcf5_cryptolocker