2024-02-12_f8bdadb7fc8ed3e1aa32b67cc5f86ec1_cryptolocker

General

Target

2024-02-12_f8bdadb7fc8ed3e1aa32b67cc5f86ec1_cryptolocker
Size

100KB
MD5

f8bdadb7fc8ed3e1aa32b67cc5f86ec1
SHA1

e53bf0abb10c3df9e51e5b381dbbb0c063112f0d
SHA256

5f75254a33766f674464c8e0d35be5e8034fdd282e0050b2e18ac5f626c9b925
SHA512

d7c7f530f1c44ab32b4bd91400a91a22a5094e5ea571161fe342265d830681cde1bc1792763ca7687812cd415fa59c006e8bfff14ae2a0108f35cdf58ba12848
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2j:xj+VGMOtEvwDpjubwQEIiVmkxv/n

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_f8bdadb7fc8ed3e1aa32b67cc5f86ec1_cryptolocker