2024-04-28_156e408d90a472b045d33ddceb31ce5c_cryptolocker

General

Target

2024-04-28_156e408d90a472b045d33ddceb31ce5c_cryptolocker
Size

68KB
MD5

156e408d90a472b045d33ddceb31ce5c
SHA1

b099c9fc1881994a3c26515a9af4bb753233a662
SHA256

62fad7636b427d6a0c9b7f9c18904dd84880b5c5d19cc3a1c7756fbc82974dfc
SHA512

a07aec4eb7d12b598a496d6dbb215cccf4bbbe8d76ea462eae01e5c447ec79da25f4b0fa0e057968b74757019af1855655da8546a5abaf60738e384e5a46fbf7
SSDEEP

768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1P/:quJu9cvMOtEvwDpjWYTjipvF2bx1PQA/

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2024-04-28_156e408d90a472b045d33ddceb31ce5c_cryptolocker
unpack001/out.upx