2024-01-25_5e456514acba95c220b3bee52007d305_cryptolocker

General

Target

2024-01-25_5e456514acba95c220b3bee52007d305_cryptolocker
Size

60KB
MD5

5e456514acba95c220b3bee52007d305
SHA1

bc01433a0b4c4bc5759046e94847c7a033aea646
SHA256

40e482e951650c80c8390bf679ec4155d6c07958cbec14c6657c73bb532f9326
SHA512

97e945faf2dc32c5a9b057c377bf5b2c728d7d4d5e4f7b65b290ee5719b5bc5f6dc846a54e8f89c59d11da8909173317e2d832dffea5bdea412e42c363d981d3
SSDEEP

768:P8mnjO6LsoEEeegiZPvEhHSG+gwQum/kLyMro2GtOOtEvwDpjK:P8mnK6QFElP6n+gwNmddpMOtEvwDpj

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-01-25_5e456514acba95c220b3bee52007d305_cryptolocker