2024-01-25_59796b548d643ef5532ecd1138966f74_cryptolocker

General

Target

2024-01-25_59796b548d643ef5532ecd1138966f74_cryptolocker
Size

115KB
MD5

59796b548d643ef5532ecd1138966f74
SHA1

bdb3d3c1c43109a53627514b73b15b585008d1a6
SHA256

ac1e4a9ba6ee34f32645634e2f85aa362a95c522526ec64bca2bb1b7d8a750a2
SHA512

b2630cc6025e1fdcc67e1698aff334184a209e3c13470fb08f9220d1999f1e50da6f3ff250b47aec7dc512107fcbe07e0a3b6ec8caeb95ddbc990c1a7a3c3f82
SSDEEP

1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01f:z6a+CdOOtEvwDpjczN

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_59796b548d643ef5532ecd1138966f74_cryptolocker