2024-02-12_8597c90d1c11c6c769ce9568704cd1a7_cryptolocker

General

Target

2024-02-12_8597c90d1c11c6c769ce9568704cd1a7_cryptolocker
Size

62KB
MD5

8597c90d1c11c6c769ce9568704cd1a7
SHA1

f4df568c7cd0c2038633d16b26e3cb297a8fde03
SHA256

d4128c5f4d7f8329dda821c7b4bac8585d42b345622e8aa71f10981b92897eed
SHA512

97264c7a0a3cc636b4ed870fb306e3bdc20a45865349c377dd4189330cae6ec97db16cfa6d4f5d0d2e554ade815cf0ab1045b7dd82cdce689ad9f4ba57022612
SSDEEP

768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mnVlD:zj+soPSMOtEvwDpj4kpmeLmn3D

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_8597c90d1c11c6c769ce9568704cd1a7_cryptolocker