2024-02-12_48422d1de467d2df58a9424f2bc1fc3b_cryptolocker

General

Target

2024-02-12_48422d1de467d2df58a9424f2bc1fc3b_cryptolocker
Size

61KB
MD5

48422d1de467d2df58a9424f2bc1fc3b
SHA1

941925b2e47630a48eadea9b43844492b46609c9
SHA256

5b8a74d58a12ca9c45e1b15806f72f63a64216b8a0e6162ebfbc29630a47bf55
SHA512

deb06b0cf3406f5e151a1a7adb42b0085762f37cbd8beee099972d61d4340e7c1a2b9e53130c0c18b9c9181406ab7a19242e4597199db2ec30cf0c30bcfd3fcd
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY7D3:1nK6a+qdOOtEvwDpjY

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_48422d1de467d2df58a9424f2bc1fc3b_cryptolocker