2024-01-25_db6bc5165385d7c2d19ac1e688ce6dfe_cryptolocker

General

Target

2024-01-25_db6bc5165385d7c2d19ac1e688ce6dfe_cryptolocker
Size

60KB
MD5

db6bc5165385d7c2d19ac1e688ce6dfe
SHA1

d2fa181c2fc9f7197a68400b8e7a748b68b5c995
SHA256

fff418a6c6d2e3b0f7aa2b92218d894ccc988d754b1b4928d58ea94f81eeaf8f
SHA512

4aac58e53ecc90b606b44d2aaf17ed4276a808edfcad1732a6c72238e2160edecd3aec4d97fa73557df867185dfc040d080275eeccbce7de6686a515dea69227
SSDEEP

768:P8mnjO6LsoEEeegiZPvEhHSG+gwyum/kLyMro2GtOOtEvwDpjK:P8mnK6QFElP6n+gwrmddpMOtEvwDpj

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_db6bc5165385d7c2d19ac1e688ce6dfe_cryptolocker