2024-01-25_f99d0c28e52597958c35ecd0ec00f55a_cryptolocker

General

Target

2024-01-25_f99d0c28e52597958c35ecd0ec00f55a_cryptolocker
Size

75KB
MD5

f99d0c28e52597958c35ecd0ec00f55a
SHA1

d61f6c25c65acea065a6d2f88dc83e16384177da
SHA256

f68a0aa7625616b0e5d55f92dd68c55a7527289e2d2f1c8998a62b91281e6755
SHA512

e8ccfdfd8dbe02e82408ea760ecc61f3d6eb100b101ab0c0bca5585ca95702e6ff6de1d1703d7c98c7f990a1051d7b56278e14dc0830dd2d53dc482e4ac78149
SSDEEP

1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBde:T6a+rdOOtEvwDpjNtE

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_f99d0c28e52597958c35ecd0ec00f55a_cryptolocker