2024-02-12_50eb50a2a424d69e6907106db7887468_cryptolocker

General

Target

2024-02-12_50eb50a2a424d69e6907106db7887468_cryptolocker
Size

56KB
MD5

50eb50a2a424d69e6907106db7887468
SHA1

6aea148c392727694cb48c9dfb8c45ee7e7298d6
SHA256

49fca5a78d3e946abce36499df180095a42cc936ca8db4071215ea2aeff7bde0
SHA512

c9cf325964d6d41cdfd41b845ef67cd59351879599585f18f420a4713a876db6394edd1ade89dccb874d5ed9a57c254ec69ff250fec63cd1dbb42b44b301b681
SSDEEP

768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpymZuK:zj+soPSMOtEvwDpj4yeK

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_50eb50a2a424d69e6907106db7887468_cryptolocker