2024-04-17_ddf831abb9713681e0a12a52a7c1af91_cryptolocker

General

Target

2024-04-17_ddf831abb9713681e0a12a52a7c1af91_cryptolocker
Size

68KB
MD5

ddf831abb9713681e0a12a52a7c1af91
SHA1

b1d8b7bd592409ebf8cf6f6ff873d3c71f303736
SHA256

996130b46224bc91f71aaf9c787db3e482b4e6c0abaf32242ca2a2e0cc666914
SHA512

252667f5be26eacbfd2980aa8b1035733dd7d4a8aea437e78b2951a02b4efa47f6db21ebcf6da1ece6870b097be973fdfa4270cd4e485e93c954fdbbd7510a19
SSDEEP

768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PM:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAM

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2024-04-17_ddf831abb9713681e0a12a52a7c1af91_cryptolocker
unpack001/out.upx