2024-01-25_aeeab6dd7362ce4d7d0867e9b2d1fd38_cryptolocker

General

Target

2024-01-25_aeeab6dd7362ce4d7d0867e9b2d1fd38_cryptolocker
Size

53KB
MD5

aeeab6dd7362ce4d7d0867e9b2d1fd38
SHA1

18de40054e097eb37cb243bdbe6dc2b58cba53e1
SHA256

3e63c6815ab27549b2e474a4c1971fa5486ea88a7832900d5047dbad77a1d1ad
SHA512

d6cd3b736cfff78ba9fbed39a1dd3efb867a0c59ffba04e160fc391c12c2fa8a61fc1f07bddeaccb860da1c69c58b90ff5a531eafa38831135ce105c8702fe77
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7Wwf:6j+1NMOtEvwDpjr8oxEL

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_aeeab6dd7362ce4d7d0867e9b2d1fd38_cryptolocker