2024-02-12_d631986b32595b0722584f5013afa11e_cryptolocker

General

Target

2024-02-12_d631986b32595b0722584f5013afa11e_cryptolocker
Size

65KB
MD5

d631986b32595b0722584f5013afa11e
SHA1

fb4ff69e111b0926046ca5eaaa1335ff1305661c
SHA256

b72b3d90646dfe586e31d7a700f4ede4ff89cc77e2ac6afa7f793e8a6279edfa
SHA512

beb77c3d7b5506e7d76590c18c92a61dff78442a7bdf3dbe350ac178631d367ac7783689adf0a3d0d99d624b9426d2ec77ecf69295438d4f6cb001915be96b79
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UE:1nK6a+qdOOtEvwDpjh

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_d631986b32595b0722584f5013afa11e_cryptolocker