2024-01-25_aa207dd2cd8212d7f36bfae60463c24c_cryptolocker

General

Target

2024-01-25_aa207dd2cd8212d7f36bfae60463c24c_cryptolocker
Size

47KB
MD5

aa207dd2cd8212d7f36bfae60463c24c
SHA1

adbabfc97a8abb04708fc19faeff096f173b48ca
SHA256

4e4c6574601cccdee96ee946fb4f8c2e5f35280ea7888dff7c9e96908790d59a
SHA512

3a9c94d8461ad8d30e50027665583fcb4ecbb9d636385c00f95136de3abd48dacff03aa91ebd44a614e94359f662d67815c29de0d7ff33be69f7993eefd40273
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rzhwa6E:xj+VGMOtEvwDpjy+Tr

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_aa207dd2cd8212d7f36bfae60463c24c_cryptolocker