2024-02-12_2cfb1ff98efe5de92c9c397023faffe1_cryptolocker

General

Target

2024-02-12_2cfb1ff98efe5de92c9c397023faffe1_cryptolocker
Size

61KB
MD5

2cfb1ff98efe5de92c9c397023faffe1
SHA1

080b4d4ae6a97149846364702f0011c6855bd5b9
SHA256

47c41edfbb8337d299b6b16d003c64448089f98197fd6a50413642eee83e4856
SHA512

4371a450faa59333c0a63ad79ceb4479a39d6a8cc48dedc7bfde1841a9b612c6c3469383b3194e7255cea98d8ce7357812a87d4f53ffc8b356b4475b82916108
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY7D8:1nK6a+qdOOtEvwDpjT

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_2cfb1ff98efe5de92c9c397023faffe1_cryptolocker