2024-02-12_5c3065f93b534a1249dea9a6f9d854a9_cryptolocker

General

Target

2024-02-12_5c3065f93b534a1249dea9a6f9d854a9_cryptolocker
Size

54KB
MD5

5c3065f93b534a1249dea9a6f9d854a9
SHA1

de79f3789661ea38d51955ad89e47f75886c89e1
SHA256

c885f4d3f4ee75d5fde18d77a413e02597366dcaa2f597dab95c2a7dbc46bd58
SHA512

aef34859270befb44b955d6c0998f3cc770be3fdaf23e760f420aeecbae037b5d277afa8c32e8d471a4f8a5f06ac504ff9438593e82eec4a5e76df478c036796
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbP/MM0:xj+VGMOtEvwDpjubXMM0

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-02-12_5c3065f93b534a1249dea9a6f9d854a9_cryptolocker