2024-02-12_bd89eb7965cc95bff805374fdb0ee26a_cryptolocker

General

Target

2024-02-12_bd89eb7965cc95bff805374fdb0ee26a_cryptolocker
Size

60KB
MD5

bd89eb7965cc95bff805374fdb0ee26a
SHA1

c1dd5f74f915239cc6563755687c79379e873155
SHA256

fa9e969d2f594f9a2c2e327ffd1669885e26f6618a344f9da4475a58bdcfa29a
SHA512

ad5502e3b6bce644b042c9cd895365e4f6418a2351660b474def0b377a30db3f06c462b147db4b88111d64ebef0ec97cd54075fd56d4b86643445046a211a8a7
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwDlo:xj+VGMOtEvwDpjubEgywa

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_bd89eb7965cc95bff805374fdb0ee26a_cryptolocker