2024-04-03_56976a0761450b3eb2aac30a6360d0ab_cryptolocker

General

Target

2024-04-03_56976a0761450b3eb2aac30a6360d0ab_cryptolocker
Size

92KB
MD5

56976a0761450b3eb2aac30a6360d0ab
SHA1

6b209adb5446810007034bd243a4826cba5fd312
SHA256

000c6ce0c22aa071a5915c8593174a684ac44f198f6d833a4efe0f29d39bbd95
SHA512

cb64d14fa3fa40a4d40bc386f50b6cfb6dda896c0a92ee2c479c64b6d64b5b87ddf3599af532aa3e17b4c01d00a99ba5cb31d98a3287f17efebfd0bc2d01367a
SSDEEP

1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/b:zCsanOtEvwDpjBb

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-04-03_56976a0761450b3eb2aac30a6360d0ab_cryptolocker