2024-02-12_590fe969d886bad01c5f1c2b026260db_cryptolocker

General

Target

2024-02-12_590fe969d886bad01c5f1c2b026260db_cryptolocker
Size

64KB
MD5

590fe969d886bad01c5f1c2b026260db
SHA1

e7a1ee3e58d370cf92b7439aa9bd37a55505908d
SHA256

bcc6aee40c0c611945460c6ac0242c7a2ce9b42bc9fae6ed4cd54671618a7607
SHA512

fe938180a2c9a6c2acbeac6e966933958a19c11e9bd970885a29c4a200a6b03e60ded365996b3fb7b15f0149b43939c7d74acc949b6cc1b0583b83b8da4dcf14
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPIb:6j+1NMOtEvwDpjr8ox8UDEpuha8PIb

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_590fe969d886bad01c5f1c2b026260db_cryptolocker