2024-01-25_53eb70165f5fc2b0c5841693c4176abc_cryptolocker

General

Target

2024-01-25_53eb70165f5fc2b0c5841693c4176abc_cryptolocker
Size

64KB
MD5

53eb70165f5fc2b0c5841693c4176abc
SHA1

6d375ae056a0ac10ff4f184b5924767dcf9775c6
SHA256

61402873e79d37fac22cc1a27bad70ba1fe5e2ca1c81051ff74e066a866317db
SHA512

0750a9e8f210667ea75cc9cb106a130a217115dbc26ecec6612290d0dc0e36f19be7b54d94acf115abca724686f5856f125a8699ef170154bf1bc6c0b4f4d1df
SSDEEP

768:T6LsoEEeegiZPvEhHSG+g0mum/kLyMro2GtOOtEvwDpjh:T6QFElP6n+g0fmddpMOtEvwDpj

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_53eb70165f5fc2b0c5841693c4176abc_cryptolocker