2024-01-25_a9d2346b879000d8683da1102604210e_cryptolocker

General

Target

2024-01-25_a9d2346b879000d8683da1102604210e_cryptolocker
Size

40KB
MD5

a9d2346b879000d8683da1102604210e
SHA1

ce453f13f3568629cf2463a9e97bde3c7f109021
SHA256

9428e9731d6599a663b3e02e4baa2ad00d2f764653bb39abbd40fc486bbbbfb5
SHA512

4fc97eeb25fa32dc9cd8e84fbf699f34459cf5543cff117486b6fe75925eda1d9c4790bec28073045e0c57fc66da03d578161d9fb20100083dec113b97fcfcc0
SSDEEP

384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOo:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/G

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_a9d2346b879000d8683da1102604210e_cryptolocker