2024-01-25_561a19f1368139296bbd40a9711f04d7_cryptolocker

General

Target

2024-01-25_561a19f1368139296bbd40a9711f04d7_cryptolocker
Size

99KB
MD5

561a19f1368139296bbd40a9711f04d7
SHA1

f11aedfb20221a159604336012682a6146278686
SHA256

4e042b9356844d81d04cb58c2a516d62966b0ac1e90c3dee53a0ed0323ef84a1
SHA512

12857020a9f66aa5bc9ec7905bd0b96355d0b1409c339157e16e4eefb1711ba8af77aa10fce2628fad1b0b5861d8a4a649957627ddd4809d6b3cd4dfce551cfa
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2+:xj+VGMOtEvwDpjubwQEIiVmkxv/i

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_561a19f1368139296bbd40a9711f04d7_cryptolocker